Cross site scripting

A stored Cross-Site Scripting XSS vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-content parameter. This is displayed in the page footer of every front-end page and executed in the...

CVE-2018-17586

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...

CVE-2018-19547

JTBCPHP 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter...

CVE-2018-19547

JTBCPHP 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter...

JTBC(PHP) Cross-Site Scripting Vulnerability

JTBC PHP is an open source CMS Content Management System. A cross-site scripting vulnerability exists in JTBC PHP version 3.0.1.7. A remote attacker can exploit the vulnerability by sending the 'content' parameter to console/xml/manage.php?type=action&action=edit URL to inject arbitrary Web scrip...

Surreal ToDo 0.6.1.2 - Local File Inclusion

Surreal ToDo 0.6.1.2 - Local File Inclusion Exploit Title: Surreal ToDo 0.6.1.2 - Local File Inclusion Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: http://getsurreal.com/surrealtodo Software Link:...

Cross site request forgery (csrf)

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

CVE-2018-19192

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

CVE-2018-19192

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

CVE-2018-19192

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

SeaCMS cross-site scripting vulnerability (CNVD-2018-19071)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the adminvideo.php file in SeaCMS version 6.61, which can be exploited by remote attackers to...

OpenEMR Directory Traversal Vulnerability

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A directory traversal vulnerability exists in portal/importtemplate.php in OpenEMR versions prior to 5.0.1.4, which can be exploited by remote attackers to execute arbitrary PHP code via the "doci...

rejucms cross-site scripting vulnerability

rejucms is an online video web content management system CMS. A cross-site scripting vulnerability exists in rejucms version 2.1. A remote attacker can inject arbitrary web script or HTML by sending the 'content' parameter to the admin/book.php URL...

Cross site scripting

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14838

CVE-2018-14838 affects rejucms 2.1 and is a stored XSS vulnerability in the admin/book.php content parameter. The issue allows injection of script/HTML through that parameter, leading to potential script execution in the context of the affected CMS. No explicit mitigation or patch details are pro...

CVE-2018-14838

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14513

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formcontent parameter to the index.php?m=feedback&f=index&v=contact URI...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-14089)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can inject arbitrary Web script or HTML by sending the 'formcontent'...

GreenCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-13895)

GreenCMS is a content management system CMS based on ThinkPHP. A cross-site request forgery vulnerability exists in GreenCMS version 2.3.0603. A remote attacker can exploit this vulnerability by sending the 'content' parameter to the index.php?m=admin&c=media&a=fileconnect URL to execute arbitrar...

Ximdex cross-site scripting vulnerability (CNVD-2018-14423)

Ximdex is a content and data management system. The system includes features such as an intelligent search engine, information aggregation, image and text recognition. A cross-site scripting vulnerability exists in the xowl/request.php file in Ximdex version 4.0. A remote attacker can exploit thi...