Cost Calculator < 1.6 - Contributor+ Stored Cross-Site Scripting

The plugin allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the Description fields of a Cost Calculator Price Settings which gets injected on the edit page as well as any page that embeds the calculator using the shortcode, as well as the Text...

CVE-2021-39111

The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version 8.14.0 before 8.18.2 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the handling of supplied content such a...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

Web-School ERP 跨站脚本漏洞

Web-School ERP is a school management software for schools and educational organizations. A stored cross-site scripting vulnerability exists in the Activity Name and Description fields in Web-School ERP version 5.0. An attacker can exploit the vulnerability to inject and execute JavaScript code...

PT-2020-16929

Name of the Vulnerable Software and Affected Versions SourceCodester Gym Management System version 1.0 Description A stored Cross-site scripting XSS issue allows users to inject and store arbitrary JavaScript code in "index.php?page=packages" via vulnerable fields Package Name and Description...

Zyxel NAS 326 Cross-Site Scripting Vulnerability

The Zyxel NAS 326 is a two-drive personal cloud storage device from Zyxel. A cross-site scripting vulnerability exists in Zyxel NAS 326 version 5.21 and earlier. A remote authenticated attacker can exploit this vulnerability to inject arbitrary JavaScript or HTML via the user, group, and file sha...

WAGO 750-881 Ethernet Controller Device Cross-Site Scripting Vulnerability

The WAGO 750-881 Ethernet Controller devices is an Ethernet controller device from WAGO Germany. A cross-site scripting vulnerability exists in the SNMP configuration of the webserv/cplcfg/snmp.ssi file in the WAGO 750-881 Ethernet Controller device version 01.09.1813 and earlier, which can be...