3 matches found
CVE-2019-12954
SolarWinds Network Performance Monitor Orion Platform 2018, NPM 12.3, NetPath 1.1.3 allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT...
CVE-2018-18540
TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL...
Cross site scripting
TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL...