Cross-site Scripting (XSS)

weison-tech/yii2-rbac is vulnerable to cross-site scripting XSS. The attack is possible because it does not sanitize a name filed to /contact.html via protected\core\modules\home\models\Contact.php , allowing an attacker to inject arbitrary script through it...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

Design/Logic Flaw

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

barbaranettelbeck.com XSS vulnerability

Open Bug Bounty ID: OBB-642193 Description| Value ---|--- Affected Website:| barbaranettelbeck.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

calendario-365.com.br XSS vulnerability

Open Bug Bounty ID: OBB-620329 Description| Value ---|--- Affected Website:| calendario-365.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

deurenservicecentrum.nl XSS vulnerability

Vulnerable URL: https://www.deurenservicecentrum.nl/contact.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4809035 Google Pagerank| 0 VIP website status:| No Check...

dsi-corp.com XSS vulnerability

Vulnerable URL: http://www.dsi-corp.com/contact.html%E2%80%8E? Details: Description| Value ---|--- Patched:| Yes, at 11.10.2015 Latest check for patch:| 11.10.2015 13:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 997120 Google Pagerank| 3 VIP website status...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to newprofile.html; the 2 firstname, 3 lastname, and 4 company parameters to signup/signup.html; and the 5 firstname, 6 lastname, and 7...