CVE-2020-29469

CVE-2020-29469 affects WonderCMS 3.1.3 with a cross-site scripting (XSS) flaw in the Menu component. The vulnerability lets an attacker inject arbitrary scripts via the Menu settings, which are then executed when users visit the site directory, enabling cookie theft per the documented payload exa...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

CVE-2020-35240

CVE-2020-35240 affects FluxBB 1.5.11 with a cross-site scripting (XSS) vulnerability in the Blog Content component. The flaw allows an attacker to inject an XSS payload in Blog Content, causing the payload to execute for visitors and potentially enabling cookie theft. The provided connected docum...

CVE-2020-35240

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...

CVE-2020-29477

Invision Community 4.5.4 is affected by cross-site scripting XSS in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted...

Flatpress 跨站脚本漏洞

FlatPress is a lightweight, easy to set up blogging engine. A cross-site scripting vulnerability exists in the "Blog Content" component of FlatPress 1.0.3. An attacker can exploit this vulnerability to steal cookies...

Egavilanmedia User Registration & Login System 跨站脚本漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel version 1.0, which can be exploited by an attacker to...

WonderCMS 跨站脚本漏洞

WonderCMS is an open source, fast, small and simple flat file cms. A cross-site scripting vulnerability exists in the Menu component in WonderCMS 3.1.3. An attacker can exploit this vulnerability to steal cookies...

PT-2020-17298 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress version 1.0.3 Description: The issue allows an attacker to inject a cross-site scripting XSS payload in blog content via the admin panel. When a user visits the affected blog page, the XSS payload is triggered, potentially allowing...

Fluxbb 跨站脚本漏洞

FluxBB is an open source forum application. A cross-site scripting vulnerability exists in the "Blog Content" component of FluxBB 1.5.11. An attacker can exploit this vulnerability to steal cookies...

Invision Community 跨站脚本漏洞

Invision Community is a software for designing and developing mobile application UI from Invision, Inc. in the United States. A cross-site scripting vulnerability exists in Invision Community version 4.5.4, which can be exploited to inject an XSS payload in the field Name, which can be used by an...

WonderCMS 跨站脚本漏洞

WonderCMS is an open source, fast, small and simple flat file cms. A cross-site scripting vulnerability exists in the "Page Description" component of WonderCMS 3.1.3. An attacker can exploit this vulnerability to steal cookies...

OpenCart Cross-Site Scripting Vulnerability (CNVD-2020-75515)

OpenCart is a PHP-based open source online e-commerce solution. A cross-site scripting vulnerability exists in the email Subject field in OpenCart 3.0.3.6. An attacker can exploit this vulnerability to steal cookies...

Cross site scripting

OpenCart 3.0.3.6 is affected by cross-site scripting XSS in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS triggers and the attacker can able to steal...

CVE-2020-29475

nopCommerce Store 4.30 is affected by cross-site scripting XSS in the Schedule tasks name field. This vulnerability can allow an attacker to inject the XSS payload in Schedule tasks and each time any user will go to that page of the website, the XSS triggers and attacker can able to steal the...

Cross site scripting

nopCommerce Store 4.30 is affected by cross-site scripting XSS in the Schedule tasks name field. This vulnerability can allow an attacker to inject the XSS payload in Schedule tasks and each time any user will go to that page of the website, the XSS triggers and attacker can able to steal the...

Opencart 跨站脚本漏洞

OpenCart is a PHP-based open source online e-commerce solution. A cross-site scripting vulnerability exists in the email Subject field in OpenCart 3.0.3.6. An attacker can exploit this vulnerability to steal cookies...

nopCommerce 跨站脚本漏洞

nopCommerce is a set of open source general e-commerce platform. A cross-site scripting vulnerability exists in nopCommerce Store version 4.30, which stems from the Schedule tasks name field not being effectively filtered for XSS statements. This vulnerability allows an attacker to inject an XSS...

WonderCMS Cross-Site Scripting Vulnerability

WonderCMS is an open source, fast, small and simple flat file cms. A cross-site scripting vulnerability exists in the "Admin Panel" of WonderCMS 3.1.3. The vulnerability can be exploited to steal cookies via page keywords...

CVE-2020-29247

WonderCMS 3.1.3 is affected by cross-site scripting XSS in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload...