1749 matches found
PT-2022-12272
Name of the Vulnerable Software and Affected Versions Taocms version 3.0.2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability was found in the Management Column component. Recommendations For Taocms version 3.0.2, consider disabling the Management...
CVE-2021-44969: Improper Neutralization of Input During Web Page Generation
Taocms v3.0.2 was discovered to contain a cross-site scripting XSS vulnerability via the Management Column component...
CVE-2020-20600
MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...
CVE-2020-20600
CVE-2020-20600 affects MetInfo 7.0 beta. The vulnerability is a stored cross-site scripting (XSS) in the $name parameter of admin/?n=column&c=index&a=doAddColumn. This is confirmed across multiple feeds (NVD, RH, CVE lists) and is tied to MetInfo 7.0 beta with the vulnerability location in the sp...
CVE-2020-20600
MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...
PT-2021-10515
Name of the Vulnerable Software and Affected Versions: MetInfo version 7.0 beta Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is located in the $name parameter of the "admin/?n=column&c=index&a=doAddColumn" endpoint. Recommendations: For...
CVE-2020-20600: Improper Neutralization of Input During Web Page Generation
MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...
CVE-2021-45017
Catfish CMS CSRF in
PT-2021-24190
Name of the Vulnerable Software and Affected Versions: Catfish versions prior to 6.1. Description: A Cross Site Request Forgery CSRF issue exists when uploading an HTML file containing CSRF on a website that uses a Google editor. This allows specifying a malicious URL address in the Add Menu...
CVE-2021-44116: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...
CVE-2021-25785
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
CVE-2021-25785
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
Cross site scripting
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
CVE-2021-25785
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
CVE-2021-25785: Improper Neutralization of Input During Web Page Generation
Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...
PT-2021-16795
Name of the Vulnerable Software and Affected Versions Taocms version 2.5Beta5 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the Management column component, allowing potential exploitation. Recommendations For Taocms version 2.5Beta5, consider restrictin...
CVE-2021-39413
Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...
Cross site scripting
Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...
Exploit for Cross-site Scripting in Jamovi
CVE-2021-28079 - POC Jamovi =1.6.18 is affected by a cros...
EditableTable <= 0.1.4 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape any of the Table and Column fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Create a new EDTB and put the following payload in the Table Name, Column Name or...