Design/Logic Flaw

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

CVE-2019-16130

Consolidated from connected documents: Affected product is YII2-CMS v1.0. The vulnerability is an XSS in the protected\core\modules\home\models\Contact.php component, triggered via the name field in /contact.html. The issue is documented under CVE-2019-16130 with multiple feeds (Red Hat, GV/OSV, ...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

PT-2019-14529

Name of the Vulnerable Software and Affected Versions YII2-CMS version 1.0 Description The issue concerns a Cross-Site Scripting XSS problem. It is located in the protectedcoremoduleshomemodelsContact.php file, specifically via the name field. This field is vulnerable when accessed through the...

CVE-2019-16130: Improper Neutralization of Input During Web Page Generation

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

outdoorlivingmag.com XSS vulnerability

Open Bug Bounty ID: OBB-682609 Description| Value ---|--- Affected Website:| outdoorlivingmag.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mzplayer.se XSS vulnerability

Open Bug Bounty ID: OBB-678874 Description| Value ---|--- Affected Website:| mzplayer.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

medicalvision.se XSS vulnerability

Open Bug Bounty ID: OBB-678872 Description| Value ---|--- Affected Website:| medicalvision.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

centrexservices.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-676940 Description| Value ---|--- Affected Website:| centrexservices.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

agospap.com XSS vulnerability

Open Bug Bounty ID: OBB-675360 Description| Value ---|--- Affected Website:| agospap.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mldm.de XSS vulnerability

Open Bug Bounty ID: OBB-669624 Description| Value ---|--- Affected Website:| mldm.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mapsyou.com XSS vulnerability

Open Bug Bounty ID: OBB-667594 Description| Value ---|--- Affected Website:| mapsyou.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

holzkohlewerk.de XSS vulnerability

Open Bug Bounty ID: OBB-664369 Description| Value ---|--- Affected Website:| holzkohlewerk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

getecgo.de XSS vulnerability

Open Bug Bounty ID: OBB-664368 Description| Value ---|--- Affected Website:| getecgo.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hamburgballett.de XSS vulnerability

Open Bug Bounty ID: OBB-664357 Description| Value ---|--- Affected Website:| hamburgballett.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

andiamopizza94.com XSS vulnerability

Open Bug Bounty ID: OBB-659139 Description| Value ---|--- Affected Website:| andiamopizza94.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

delice-pizza.fr XSS vulnerability

Open Bug Bounty ID: OBB-659121 Description| Value ---|--- Affected Website:| delice-pizza.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

delicepizza78.fr XSS vulnerability

Open Bug Bounty ID: OBB-659118 Description| Value ---|--- Affected Website:| delicepizza78.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

goodthai.fr XSS vulnerability

Open Bug Bounty ID: OBB-659110 Description| Value ---|--- Affected Website:| goodthai.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...