2 matches found
Cross site scripting
A cross-site scripting XSS vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment text box...
3.5CVSS5.3AI score0.00436EPSS
SaveExploits1References1Affected Software1
CVE-2022-27961: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment text box...
5.4CVSS6.2AI score0.00436EPSS
SaveExploits1References2
20