Lucene search
K

868 matches found

CNVD
CNVD
added 2021/12/30 12:0 a.m.16 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01685)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.1CVSS6AI score0.0024EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/30 12:0 a.m.21 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01684)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.6CVSS5.2AI score0.00234EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/29 12:0 a.m.14 views

Qibosoft Cross-Site Scripting Vulnerability

Qibosoft qibosoft is a content management system CMS from Qibosoft, China. qibosoft has a cross-site scripting vulnerability that originates in the /admin/index.php?lfj=friendlink & action=add link of the admin component of the product. The vulnerability is caused by the...

5.4CVSS3.1AI score0.00354EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/29 12:0 a.m.2 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.1CVSS5.4AI score0.0024EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/12/29 12:0 a.m.1 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.6CVSS5.4AI score0.00234EPSS
Exploits1References2
CNVD
CNVD
added 2021/12/21 12:0 a.m.15 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01692)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from livehelperchat's susceptibility to input mismatches during web page generation "cross-site scripting"...

7.3CVSS5.2AI score0.00186EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/20 12:0 a.m.9 views

WordPress plugin Wappointment cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Wappointment. The vulnerability...

1.7AI score
Exploits0References1
CNNVD
CNNVD
added 2021/12/17 12:0 a.m.1 views

Nordaaker Convos 跨站脚本漏洞

Nordaaker Convos is an open source web browser-based multi-user chat application from Nordaaker, Norway. A cross-site scripting vulnerability exists in Convos-Chat that stems from a stored cross-site scripting XSS issue in Convos-Chat prior to 6.32. An attacker could exploit the vulnerability to...

5.4CVSS5.6AI score0.00263EPSS
Exploits1References4
CNVD
CNVD
added 2021/12/12 12:0 a.m.17 views

KNIME Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Knime, the Swiss company's enterprise software for putting data science workflows into production. knime stems from the lack of proper validation of client-side data by the WEB application, which can be exploited by attackers to execute client-side...

8.8CVSS5.1AI score0.0041EPSS
Exploits0References1
CNVD
CNVD
added 2021/12/07 12:0 a.m.17 views

Kentico Cross-Site Scripting Vulnerability (CNVD-2022-06913)

Kentico is an ASP.NET-based content management system CMS from Kentico, Inc. A security vulnerability exists in Kentico Xperience CMS, which stems from the fact that Kentico Xperience CMS version 13.0 13.0.43 is prone to a persistent cross-site scripting XSS vulnerability also known as stored or...

6.8CVSS3.8AI score0.00282EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/03 12:0 a.m.15 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-100246)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Plugin Events Manager, which stems from the...

6.1CVSS6.3AI score0.0021EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/01 12:0 a.m.1 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Plugin Events Manager, which stems from the...

6.1CVSS5.6AI score0.0021EPSS
Exploits1References3
CNVD
CNVD
added 2021/12/01 12:0 a.m.12 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability (CNVD-2021-100276)

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool. Acronis Cyber Protect 15 suffers from a cross-site scripti...

6.1CVSS3.1AI score0.00317EPSS
Exploits0References1
CNVD
CNVD
added 2021/12/01 12:0 a.m.13 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability

Acronis Cyber Protect is an application. providing unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a cross-site scripti...

5.4CVSS3.3AI score0.00302EPSS
Exploits0References1
CNVD
CNVD
added 2021/12/01 12:0 a.m.23 views

Waimai Super Cms Cross-Site Scripting Vulnerability (CNVD-2022-02739)

Waimai Super Cms is a takeaway ordering system. A cross-site scripting vulnerability exists in waimai Super Cms, which originates from the product's /admin.php?&m=Public&a=login link failing to properly process input data. An attacker could cause client-side code execution through this...

6.1CVSS2.6AI score0.0024EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/11/29 12:0 a.m.1 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress GenerateBlocks plugin that stems from a...

5.4CVSS5.6AI score0.0018EPSS
Exploits2References2
CNVD
CNVD
added 2021/11/29 12:0 a.m.11 views

WordPress Floating Social Media Icon plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Floating Social Media Icon plugin has a...

4.8CVSS2AI score0.00328EPSS
Exploits0References1
CNVD
CNVD
added 2021/11/26 12:0 a.m.7 views

WordPress WP Sitemap Page Cross-Site Scripting Vulnerability

WordPress is a set of PHP language development blog platform. WP Sitemap Page is a WordPress plugin. A cross-site scripting vulnerability exists in WordPress WP Sitemap Page. The vulnerability stems from the lack of proper validation of client-side data in the web application. An attacker can...

6.5AI score
Exploits0References1
CNVD
CNVD
added 2021/11/24 12:0 a.m.31 views

JetBrains YouTrack Cross-Site Scripting Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack, which stems from...

3.5CVSS1.7AI score0.00008EPSS
Exploits0Affected Software2
CNVD
CNVD
added 2021/11/24 12:0 a.m.20 views

Snipe-IT Cross-Site Scripting Vulnerability (CNVD-2022-19842)

Snipe-IT is an open source IT asset/license management system. Snipe-IT has a cross-site scripting vulnerability that stems from the product's web generation page not validating the input data, which could be exploited by an attacker to cause client-side code execution...

8CVSS2.8AI score0.00326EPSS
Exploits1References1
Rows per page
Query Builder