205 matches found
PT-2024-37699 · Unknown · Heyewei Springbootcms
Name of the Vulnerable Software and Affected Versions: heyewei SpringBootCMS up to 2024-05-28 Description: A vulnerability has been found in the Guestbook Handler component of heyewei SpringBootCMS, affecting an unknown function of the file /guestbook. The manipulation of the Content argument lea...
SpringBootCMS Cross-Site Scripting Vulnerability
SpringBootCMS is a content management system developed by heyewei personal developer. A cross-site scripting vulnerability exists in SpringBootCMS, which originates from a cross-site scripting vulnerability in the Content parameter of the Guestbook Handler...
CVE-2024-37675
Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the parameter "sectionContent" related to the functionality of adding notes to an uploaded file...
CVE-2024-32343
A cross-site scripting XSS vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter...
CVE-2024-32343
Boid CMS v2.1.0 has an XSS vulnerability in the Create Page, exploitable by injecting a crafted payload into the Content parameter. The issue is documented across multiple sources with no explicit exploitation details provided and a CVSS v3.1 base score of 6.1 (MEDIUM), requiring user interaction...
PT-2024-24522 · Boidcms · Boidcms
Name of the Vulnerable Software and Affected Versions: Boid CMS version 2.1.0 Description: A cross-site scripting XSS vulnerability in the Create Page of Boid CMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter. Recommendations:...
CVE-2024-32343
A cross-site scripting XSS vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter...
PT-2024-20301 · Gnuboard · Gnuboard
Name of the Vulnerable Software and Affected Versions: Gnuboard g6 versions before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5 Description: A Cross Site Scripting XSS issue allows remote attackers to execute arbitrary code via the wr content parameter. This enables attackers to inject...
beetl-bbs Security Vulnerabilities
beetl-bbs is a forum system by xiandafu's personal developer. A security vulnerability exists in version 2.0 of beetl-bbs, which stems from a stored cross-site scripting XSS vulnerability in the post/save content parameter...
CVE-2024-0189
A vulnerability has been found in RRJ Nueva Ecija Engineer Online Portal 1.0 and classified as problematic. This vulnerability affects unknown code of the file teachermessage.php of the component Create Message Handler. The manipulation of the argument Content with the input alertx leads to cross...
RRJ Nueva Ecija Engineer Online Portal Cross-Site Scripting Vulnerability
RRJ Nueva Ecija Engineer Online Portal is an online portal for engineers from RRJ Nueva Ecija. A cross-site scripting vulnerability exists in RRJ Nueva Ecija Engineer Online Portal version 1.0, which stems from the parameter Content in the file teachermessage.php that leads to cross-site scriptin...
CVE-2023-50550
layui up to v2.74 was discovered to contain a cross-site scripting XSS vulnerability via the data-content parameter...
CVE-2023-50550
layui up to v2.74 was discovered to contain a cross-site scripting XSS vulnerability via the data-content parameter...
CVE-2023-50550
layui up to v2.74 was discovered to contain a cross-site scripting XSS vulnerability via the data-content parameter...
layui Cross-Site Scripting Vulnerability
Layui is Layui open source Web UI component library that follows the original development model . A cross-site scripting vulnerability exists in versions prior to layui v2.74, which stems from the inclusion of cross-site scripting in the data-content parameter...
PT-2023-31585 · Layui · Layui
Name of the Vulnerable Software and Affected Versions: layui versions up to v2.74 Description: The issue is a cross-site scripting XSS vulnerability. It occurs via the data-content parameter. Recommendations: For versions up to v2.74, as a temporary workaround, consider restricting the use of the...
SourceCodester Sticky Notes Cross-Site Scripting Vulnerability
SourceCodester Sticky Notes is a sticky notes application. A security vulnerability exists in SourceCodester Sticky Notes version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameters noteTitle/noteContent in the file endpoint/add-note.php...
PT-2023-32323 · Netentsec · Netentsec Ns-Asg Application Security Gateway
Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3 Description: A critical issue was found in the Netentsec NS-ASG Application Security Gateway, affecting some unknown functionality of the file /protocol/firewall/uploadfirewall.php. Th...
Cross site scripting
Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component...