79 matches found
CVE-2023-6466: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file /planet of the component User Comment Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
PT-2023-32679 · Thecosy · Thecosy Icecms
Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A vulnerability was found in the User Comment Handler component, affecting unknown code of the file /planet. The manipulation leads to cross site scripting. The attack can be initiated remotely...
CVE-2023-5024
A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...
Cross site scripting
A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...
CVE-2023-5024 Planno Comment cross site scripting
A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...
CVE-2023-5024 Planno Comment cross site scripting
A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...
CVE-2023-5024: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...
Planno Cross-Site Scripting Vulnerability
Planno is an AI-powered solar development platform from Planno. A cross-site scripting vulnerability exists in Planno version 23.04.04, which stems from a cross-site scripting XSS vulnerability in the component Comment Handler...
PT-2023-31503 · Planno · Planno
Name of the Vulnerable Software and Affected Versions: Planno version 23.04.04 Description: A problematic issue affects an unknown part of the component Comment Handler, leading to cross-site scripting. The manipulation can be initiated remotely. Recommendations: For Planno version 23.04.04, at t...
CVE-2023-0287
A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...
CVE-2023-0287
A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...
CVE-2023-0287 ityouknow favorites-web Comment cross site scripting
A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...
PT-2023-16144 · Unknown · Ityouknow Favorites-Web
Name of the Vulnerable Software and Affected Versions: ityouknow favorites-web affected versions not specified Description: A vulnerability was found in the Comment Handler component of ityouknow favorites-web, which can lead to cross-site scripting. The attack may be launched remotely. The issue...
favorites-web 跨站脚本漏洞
Favorites-web Cloud Favorites is an open source website built with Spring Boot by the individual developer Pure Smile ityouknow. A cross-site scripting vulnerability exists in favorites-web, which stems from some unknown functionality in its Comment Handler component that allows an attacker to...
CVE-2023-0287: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...
CVE-2022-4397
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
CVE-2022-4397: Incorrect Authorization
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
PT-2022-27050 · Unknown · Morontt Zend-Blog-Number-2
Name of the Vulnerable Software and Affected Versions: morontt zend-blog-number-2 affected versions not specified Description: A vulnerability was found in the component Comment Handler, specifically in the file application/forms/Comment.php. The manipulation leads to cross-site request forgery. ...