Security Bulletin: Cross-Site Scripting Vulnerability Affects IBM Emptoris Sourcing

Summary Cross-site scripting vulnerability in IBM Emptoris Sourcing could allow an attacker to execute script in a victim's Web browser Vulnerability Details IBM Emptoris Sourcing is vulnerable to cross-site scripting, caused by improper validation of user supplied input. A remote attacker could...

Stored Cross-Site Scripting Vulnerability in Udesk Online Counseling System

Udesk online consulting system is an industry customer service solution for businesses. A stored cross-site scripting vulnerability exists in Udesk Online Consultation System. Attackers can use the vulnerability to insert malicious js code in the page, obtain user cookies and other sensitive...

Cross-Site Scripting (XSS)

Wordpress is vulnerable to cross-site scripting XSS. The attacker can inject the arbitrary code via plugins.php or with the core wordpress on delete function, resulting in cookie theft or code injection...

UBUNTU-CVE-2018-1000556

WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploitable via an attacke...

SLiMS 8 Akasia Master File Module Cross-Site Scripting Vulnerability

SLiMS 8 Akasia is an open source, free library management system.Master File module is one of the file storage modules. A cross-site scripting vulnerability exists in the Master File module in SLiMS 8 Akasia version 8.3.1. A remote attacker can use admin/modules/masterfile/rdacmc.php?keywords= UR...

SLiMS 8 Akasia Bibliography Module Cross-Site Scripting Vulnerability

SLiMS 8 Akasia is an open source, free library management system.Bibliography module is one of the bibliographic synopsis modules. A cross-site scripting vulnerability exists in the Bibliography module in SLiMS 8 Akasia version 8.3.1. A remote attacker can use...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to Cross-Site Scripting (XSS) (CVE-2016-0280)

Summary IBM InfoSphere Information Server Framework, Information Server Governance Catalog and Information Server Business Glossary are vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a...

Balbooa Gridbox Extension Cross-Site Scripting Vulnerability in Joomla!

Joomla! is an American Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . Balbooa Gridbox extension is used in which a drag-and-drop site building extension . A cross-site scripting vulnerability...

Galaxy CMS Cross-Site Scripting Vulnerability

Galaxy CMS is a lightweight, fast-response request content management system based on the .NET Framework and a SQL Server database. A cross-site scripting vulnerability exists in Galaxy CMS, which could be exploited by an attacker to execute arbitrary script code in the browser of a user in the...

CVE-2018-11690

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the...

Ignite Realtime Openfire Cross-Site Scripting Vulnerability (CNVD-2018-14347)

Ignite Realtime Openfire formerly known as Wildfire is the IgniteRealtime community of a Java development and based on XMPP formerly known as Jabber, Instant Messaging Protocol cross-platform open-source real-time collaboration RTC server , it can build a high-efficiency instant messaging servers...

CVE-2018-5176

The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If a JSON file contains malicious JavaScript script embedded as "javascript:" links, users may be tricked into clicking and running this code in the context of the JSON Viewer. Thi...

Drupal Panopoly Core Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in Drupal's Panopoly Core module that stems from not properly handling partial node titles. The vulnerability can be exploited ...

Netis-WF2419 HTML Injection Vulnerability

Netis-WF2419 is a router product. The Netis-WF2419 suffers from an HTML injection vulnerability that stems from a program not properly validating user-supplied input. An attacker could use this vulnerability to run HTML and script code in the context of an affected website to steal cookie-based...

WordPress Itinerary plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports the setting up of personal blogging sites on servers with PHP and MySQL.Itinerary is one of the plug-ins that creates a functional itinerary of similar features for...

Drupal Services Single Sign-On Client Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Services is one of the modules that allows users to programmatically create customized Web service items. A cross-site scripting attack vulnerability exists in the Services Single Sign-...

Joomla! extension EkRishta has multiple vulnerabilities

Joomla! is an open source content management system CMS. Stored cross-site scripting and SQL injection vulnerabilities exist in Joomla! extension EkRishta. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking; obtain sensitiv...

Wchat PHP AJAX Chat Script Cross-Site Scripting Vulnerability

Wchat is a responsive PHP ajax inbox messaging chat WebApp for websites, mobile apps and control panels. A cross-site scripting vulnerability exists in Wchat PHP AJAX Chat Script. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user...

XSS Vulnerability in the Property Details Page of Hainan Creative Media's PC Website Building System

Hainan Creative Future Culture Media Co., Ltd. is engaged in brand one-stop service e-commerce advertising consulting services media enterprises. We design complete solutions for users and provide the best advertising support services. A storage-based cross-site scripting vulnerability exists in...

Stored Cross-site Scripting Vulnerability in XYCMS Nursing Home Building System

XYCMS Nursing Home Building System is a nursing home building system designed for nursing homes. A stored cross-site scripting vulnerability exists in XYCMS Nursing Home Building System. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to...