1749 matches found
PT-2022-12272
Name of the Vulnerable Software and Affected Versions Taocms version 3.0.2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability was found in the Management Column component. Recommendations For Taocms version 3.0.2, consider disabling the Management...
CVE-2021-44969: Improper Neutralization of Input During Web Page Generation
Taocms v3.0.2 was discovered to contain a cross-site scripting XSS vulnerability via the Management Column component...
CVE-2020-20600
MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...
CVE-2020-20600
CVE-2020-20600 affects MetInfo 7.0 beta. The vulnerability is a stored cross-site scripting (XSS) in the $name parameter of admin/?n=column&c=index&a=doAddColumn. This is confirmed across multiple feeds (NVD, RH, CVE lists) and is tied to MetInfo 7.0 beta with the vulnerability location in the sp...
CVE-2020-20600
MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...
PT-2021-10515
Name of the Vulnerable Software and Affected Versions: MetInfo version 7.0 beta Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is located in the $name parameter of the "admin/?n=column&c=index&a=doAddColumn" endpoint. Recommendations: For...
CVE-2020-20600: Improper Neutralization of Input During Web Page Generation
MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...
CVE-2021-45017
Catfish CMS CSRF in
PT-2021-24190
Name of the Vulnerable Software and Affected Versions: Catfish versions prior to 6.1. Description: A Cross Site Request Forgery CSRF issue exists when uploading an HTML file containing CSRF on a website that uses a Google editor. This allows specifying a malicious URL address in the Add Menu...
CVE-2021-44116: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...
CVE-2021-25785
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
CVE-2021-25785
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
Cross site scripting
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
CVE-2021-25785
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
CVE-2021-25785: Improper Neutralization of Input During Web Page Generation
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
PT-2021-16795
Name of the Vulnerable Software and Affected Versions Taocms version 2.5Beta5 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the Management column component, allowing potential exploitation. Recommendations For Taocms version 2.5Beta5, consider restrictin...
Cross site scripting
Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...
CVE-2021-39413
Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...
Exploit for Cross-site Scripting in Jamovi
CVE-2021-28079 - POC Jamovi =1.6.18 is affected by a cros...
EditableTable <= 0.1.4 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape any of the Table and Column fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Create a new EDTB and put the following payload in the Table Name, Column Name or...