CVE-2026-3041: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in xingfuggz BaykeShop up to 1.3.20. Impacted is an unknown function of the file src/baykeshop/contrib/article/templates/baykeshop/sidebar/custom.html of the component Article Sidebar Module. Such manipulation of the argument sidebar.content leads to cro...

CVE-2012-5991

CVE-2012-5991 affects Cisco Wireless LAN Controller 7.2.110.0. The issue arises from insufficient validation of user-supplied input to the WLC web interface (web_auth_custom.html), enabling remote authenticated users to cause a denial of service (device reload) via a crafted buttonClicked value i...

PT-2012-6220

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices version 7.2.110.0 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the headline parameter in the screens/base/web auth...

PT-2012-6219

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.2.110.0 Description The issue is related to cross-site request forgery CSRF vulnerabilities. An unauthenticated, remote attacker could exploit this by convincing a targeted user to follow a maliciou...