jQuery cross-site scripting vulnerability (CNVD-2021-28726)

jQuery is a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript , and has a modular , plug-in extensions and other features . A cross-site scripting vulnerability exists in jQuery version 2.2.2. The vulnerability stems from a la...

Anchor Cross-Site Scripting Vulnerability

Anchor is an open source lightweight blogging system. A cross-site scripting vulnerability exists in Anchor version 0.12.7. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-31240)

NETGEAR WNR3500L and others are products of NETGEAR.WNR3500L is a wireless router.NETGEAR R6400 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR R6400 is a wireless router.NETGEAR R6400 is a wireless router.NETGEAR R6400 is a wireless router.NETGEAR R6400 is a wireless router.NETGEA...

SAP NetWeaver AS ABAP Business Server Cross-Site Scripting Vulnerability (CNVD-2020-32898)

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB. The vulnerability stems from the WEB...

NETGEAR ReadyNAS OS xss Vulnerability (CNVD-2020-74064)

NETGEAR ReadyNAS OS is a set of operating systems for ReadyNAS network attached storage devices from NETGEAR. A cross-site scripting vulnerability exists in NETGEAR ReadyNAS OS 6 versions prior to 6.8.0. The vulnerability stems from a lack of proper validation of client data by the WEB applicatio...

NETGEAR R6700v2 and R6800 Cross-Site Scripting Vulnerability

The NETGEAR R6700v2 and NETGEAR R6800 are both a wireless router from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR R6700v2 prior to version 1.1.0.42 and the R6800 prior to version 1.1.0.42. The vulnerability stems from a lack of proper validation of client data by the WEB...

SuperBackup v2.0.5 - Multiple Site Scripting Vulnerabilities

Document Title: =============== SuperBackup v2.0.5 - Multiple Site Scripting Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2201 Release Date: ============= 2020-04-22 Vulnerability Laboratory ID VL-ID:...

bitcoin-abe Cross-Site Scripting Vulnerability

bitcoin-abe is a blockchain browser. The product is able to read bitcoin block files and it supports converting and loading data into a database. A cross-site scripting vulnerability exists in the call in the abe.py file in bitcoin-abe versions 0.7.2 and earlier and 0.8pre and earlier. The...

PrestaShop cross-site scripting vulnerability (CNVD-2020-25945)

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop versions after 1.7.4.0 fixed in version...

PrestaShop cross-site scripting vulnerability (CNVD-2020-25936)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop versions 1.7.6.1 and later...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2021-59152)

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A cross-site scripting vulnerability exists in several NETGEAR products. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execu...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-42022)

NETGEAR M4300-28G and others are a managed switch from NETGEAR. A cross-site scripting vulnerability exists in multiple NETGEAR products. The vulnerability stems from the lack of proper validation of client data by the WEB application. An attacker can exploit this vulnerability to execute...

PrestaShop cross-site scripting vulnerability (CNVD-2020-25942)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the exception page in PrestaShop...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2021-59153)

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A cross-site scripting vulnerability exists in several NETGEAR products. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execu...

OpenMRS Cross-Site Scripting Vulnerability (CNVD-2020-26249)

OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. OpenMRS suffers from a cross-site scripting vulnerability that stems from a UI framework error page reflecting arbitrary user-supplied input back to the browser. An attacker can exploit this...

OpenMRS Cross-Site Scripting Vulnerability (CNVD-2020-24049)

OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. A cross-site scripting vulnerability exists in OpenMRS. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerabili...

OpenMRS Cross-Site Scripting Vulnerability (CNVD-2020-24048)

OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. A cross-site scripting vulnerability exists in OpenMRS. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerabili...

Tenable Network Security Tenable.Sc Cross-Site Scripting Vulnerability

Tenable Network Security Tenable.Sc is a vulnerability analysis solution from Tenable Network Security, USA. The product supports real-time vulnerability assessment and management, among other things. A cross-site scripting vulnerability exists in Tenable Network Security Tenable.Sc versions prio...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-30686)

NETGEAR D3600 and others are products of NETGEAR USA.NETGEAR D3600 is a wireless modem.NETGEAR D6000 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router. A cross-site scripting vulnerability exists in multiple NETGEAR products. The vulnerability stems from th...

PrestaShop Cross-Site Scripting Vulnerability (CNVD-2020-25950)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop pslinklist versions prior t...