CVE-2020-13279

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-35334)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 2.2.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

Caldera Cross-Site Scripting Vulnerability

Caldera is a suite of software from the French company Caldera that provides color management, imaging and processing solutions for printer devices. A cross-site scripting vulnerability exists in Caldera version 2.7.0. The vulnerability stems from a lack of proper validation of client-side data b...

CVE-2020-13279: Uncontrolled Search Path Element

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system...

GitLab Cross-Site Scripting Vulnerability (CNVD-2021-19405)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-48229)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 4.3.0, prior to 4.2.1, and prior to 4.1.2. The vulnerability stems from a lack of proper validation of client data ...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-48232)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.3.0, 4.2.1 and 4.1.2. The vulnerability stems from the WEB application's lack of proper validation of client data. An attacke...

CVE-2020-13262

Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a link...

CVE-2020-13262: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a link...

WSO2 Identity Server and IS as Key Manager Cross-Site Scripting Vulnerabilities

WSO2 Identity Server IS and WSO2 IS as Key Manager are both products of WSO2 Corporation, USA.WSO2 Identity Server is an identity server.WSO2 IS as Key Manager is a key manager. A cross-site scripting vulnerability exists in the Management Console Policy Administration user interface in WSO2...

MONITORAPP AIWAF-VE and AIWAF-4000 Cross-Site Scripting Vulnerabilities

Monitorapp AIWAF-4000 is an application firewall from MONITORAPP Monitorapp, USA. A cross-site scripting vulnerability exists in MONITORAPP AIWAF-VE and AIWAF-4000 2020-06-16 and earlier versions. The vulnerability stems from a lack of proper validation of client data by the WEB application. An...

Wiki.js Cross-Site Scripting Vulnerability

Wiki.js is Requarks.io team of a set of Node.js-based and written in JavaScript language open source Wiki software . A cross-site scripting vulnerability exists in Wiki.js versions prior to 2.4.107. The vulnerability stems from the WEB application's lack of proper validation of client-side data. ...

WordPress wpForo Forum plugin cross-site scripting vulnerability (CNVD-2021-24376)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wpForo Forum plugin is a forum plugin used in it. A cross-site scripting vulnerability exists in WordPress wpForo Forum...

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-24378)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress, which stems from the lack of proper validation of...

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-29465)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Laborator Xenon theme is a website theme plugin that uses one of the... A cross-site scripting vulnerability exists in...

Naviwebs Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2020-35984)

Navigate CMS is an open source content management system CMS. A cross-site scripting vulnerability exists in the lib/packages/websites/website.class.php file in Navigate CMS 2.8.7 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB...

CloudBees Jenkins ECharts API Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . ECharts API Plugin is used in one of the chart...

Grafana Cross-Site Scripting Vulnerability (CNVD-2020-36524)

Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. A cross-site scripting vulnerability exists in Grafana version 5.3.1. The vulnerabilit...

Red Hat Resteasy Cross-Site Scripting Vulnerability (CNVD-2020-41082)

Red Hat Resteasy is the United States Red Hat Red Hat, a JAX-RS a Java programming language API specification implementation. A cross-site scripting vulnerability exists in Red Hat Resteasy. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

Cross-site scripting vulnerability in WebKit component of multiple Apple products (CNVD-2020-43686)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A cross-site scripting vulnerability exists in the WebKit component of several App...