CVE-2020-13423: Improper Neutralization of Input During Web Page Generation

Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...

Cross-Site Scripting (XSS)

anchorcms/anchor-cms is susceptible to cross-site scripting XSS attacks. The attacks exist because it does not sanitize the raw current URL before returning it from currenturl function...

Wordpress Recommend-a-friend 插件-raf_form.php文件current_url参数-跨站脚本漏洞

No description provided by source...

Recommend a friend 2.0.2 - inc/raf_form.php current_url Parameter Reflected XSS

The Recommend to a friend WordPress plugin was affected by an inc/rafform.php currenturl Parameter Reflected XSS security vulnerability...

CVE-2013-7276

The CVE-2013-7276 entry concerns the WordPress plugin “Recommend to a friend” (plugin version 2.0.2) with a reflected XSS in inc/raf_form.php via the current_url parameter. The underlying cause is that user-supplied current_url is reflected, allowing remote attackers to inject arbitrary script/HT...

CVE-2013-7276: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/rafform.php in the Recommend to a friend plugin 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the currenturl parameter...

CVE-2008-3202: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the currenturl parameter in a tellafriend action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...