CVE-2023-3978

A flaw was found in the Golang HTML package where it is vulnerable to Cross-site scripting caused by the improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's web browser within the security...

Security Bulletin: Vulnerability in Dojo may affect IBM Cúram Social Program Management (CVE-2018-15494)

Summary IBM Cúram Social Program Management uses the Dojo libraries, for which there is a publicly known vulnerability. Dojo Toolkit is vulnerable to cross-site scripting attack, caused by improper validation of user-supplied input by the DataGrid component. Vulnerability Details CVEID:...

PT-2021-11270

Name of the Vulnerable Software and Affected Versions: Formstone versions 1.4.16 and earlier Description: The issue is caused by improper validation of user-supplied input in the upload-target.php and upload-chunked.php files, leading to a Reflected Cross-Site Scripting XSS vulnerability. A remot...

PT-2021-11082

Name of the Vulnerable Software and Affected Versions: Cute Editor for ASP.NET version 6.4 Description: The issue is caused by improper validation of user-supplied input, leading to reflected cross-site scripting XSS. A remote attacker could exploit this using a specially crafted URL to execute a...

PT-2020-13957

Name of the Vulnerable Software and Affected Versions HCL iNotes versions 9 through 11 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using...

PT-2020-17867

Name of the Vulnerable Software and Affected Versions HCL Verse versions 10 through 11 Description The issue arises from improper handling of message content, leading to a Stored Cross-Site Scripting XSS vulnerability. An unauthenticated remote attacker could exploit this by using specially-craft...

PT-2020-13949

Name of the Vulnerable Software and Affected Versions HCL Notes versions prior to 9.0.1 FP10 IF8 HCL Notes versions prior to 10.0.1 FP6 HCL Notes versions prior to 11.0.1 FP1 Description The issue is a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to...

PT-2020-7217

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 7.0 through 8.2 Description The issue is caused by improper validation of user-supplied input, leading to cross-site scripting. A remote attacker could exploit this using a specially-crafted URL to execute scri...

CVE-2020-4082

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

Security Bulletin: Vulnerability in Web Browser XSS Protection affects IBM Algo One - Algo Risk Application (CVE-2016-0390)

Summary Vulnerability in Web Browser XSS Protection Vulnerability Details CVEID: CVE-2016-0390 DESCRIPTION: IBM Algo One - Algo Risk Application is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a...

Security Bulletin: Cross-site scripting vulnerabilities in IBM Business Process Manager (BPM) Process Portal (CVE-2015-0105)

Summary IBM Business Process Manager is vulnerable to cross-site scripting, which is caused by the improper validation of user-supplied input. A remote attacker might exploit this vulnerability using a specially crafted URL to execute a script in a user's web browser within the security context o...

PT-2018-10752

Name of the Vulnerable Software and Affected Versions Balbooa Gridbox extension versions prior to 2.4.0 Description The issue is caused by improper validation of user-supplied input, leading to cross-site scripting. A remote attacker could exploit this via a crafted URL to execute script in a...

CVE-2018-11688

Ignite Realtime Openfire before 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site,...

PHP < 5.6.33, 7.x < 7.0.27, 7.1.x < 7.1.13, 7.2.x < 7.2.1 Multiple Vulnerabilities - Windows

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

WordPress Itinerary 1.0.0 Cross Site Scripting

Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Itinerary 1.0.0 Itinerary is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Pinterest Badge 1.8.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable Pinterest Badge 1.8.0 Pinterest Badge is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

WordPress Z-URL Preview 1.6.1 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Vulnerable Z-URL Preview 1.6.1 Z-URL Preview is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

PT-2017-7605

Name of the Vulnerable Software and Affected Versions IBM Connections affected versions not specified Description The issue is caused by improper validation of user-supplied input, allowing for cross-site scripting. A remote attacker could exploit this using a specially-crafted URL to execute...

PT-2017-8267

Name of the Vulnerable Software and Affected Versions IBM Infosphere BigInsights affected versions not specified Description The issue is caused by improper validation of user-supplied input, leading to cross-site scripting. A remote attacker could exploit this using a specially-crafted URL to...

PT-2017-7601

Name of the Vulnerable Software and Affected Versions IBM Campaign affected versions not specified Description The issue is caused by improper validation of user-supplied input, allowing for cross-site scripting. A remote attacker could exploit this using a specially-crafted URL to execute script...