Lucene search
+L

364 matches found

CNNVD
CNNVD
added 2023/10/05 12:0 a.m.9 views

OpenSolution Quick CMS Cross-Site Scripting Vulnerability

OpenSolution Quick CMS is a free content management system from the OpenSolution organization. A security vulnerability exists in OpenSolution Quick CMS version v.6.7, which stems from a cross-site scripting XSS vulnerability in the parameter Files-Description...

5.4CVSS5.8AI score0.00677EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/09/25 12:0 a.m.10 views

PT-2023-28830 · Unknown · Resort Reservation System

Name of the Vulnerable Software and Affected Versions: Resort Reservation System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manage room function...

5.4CVSS6.9AI score0.00535EPSS
SaveExploits1References6
OSV
OSV
added 2023/09/21 11:15 p.m.4 views

CVE-2023-41614

A stored cross-site scripting XSS vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of Animal parameter...

4.8CVSS5.9AI score0.00362EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/09/21 11:15 p.m.7 views

CVE-2023-41614

A stored cross-site scripting XSS vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of Animal parameter...

4.8CVSS5.9AI score0.00362EPSS
SaveExploits0References3
OSV
OSV
added 2023/08/17 8:15 p.m.6 views

CVE-2023-31942

Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php...

4.8CVSS6.1AI score0.00566EPSS
SaveExploits1References1
Prion
Prion
added 2023/08/17 8:15 p.m.16 views

Cross site scripting

Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php...

4.3CVSS5.4AI score0.00566EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/07/11 1:15 a.m.3 views

CVE-2023-37191

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

4.8CVSS5.9AI score0.00649EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/07/10 12:0 a.m.6 views

Issabel PBX 跨站脚本漏洞

Issabel PBX is a software application. A free and open source software that allows you to build communication tools for your organization. A security vulnerability exists in Issabel issabel-pbx version v.4.0.0-6. An attacker can exploit this vulnerability to execute arbitrary web script or HTML v...

4.8CVSS5.7AI score0.00649EPSS
SaveExploits1References4
NVD
NVD
added 2023/07/07 4:15 p.m.26 views

CVE-2023-29998

A Cross-site scripting XSS vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated users to inject arbitrary web script or HTML and gain privileges via the description parameter...

5.4CVSS5.3AI score0.00566EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/07 4:15 p.m.4 views

CVE-2023-29998

A Cross-site scripting XSS vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated users to inject arbitrary web script or HTML and gain privileges via the description parameter...

5.4CVSS6.2AI score0.00566EPSS
SaveExploits1References3
OSV
OSV
added 2023/07/07 4:15 p.m.7 views

CVE-2023-29998

A Cross-site scripting XSS vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated users to inject arbitrary web script or HTML and gain privileges via the description parameter...

5.4CVSS6.2AI score0.00566EPSS
SaveExploits1References2
Prion
Prion
added 2023/07/07 4:15 p.m.19 views

Cross site scripting

A Cross-site scripting XSS vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated users to inject arbitrary web script or HTML and gain privileges via the description parameter...

4.9CVSS5.3AI score0.00566EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/07/07 12:0 a.m.8 views

G3W-SUITE 跨站脚本漏洞

G3W-SUITE is G3W-SUITE open source a framework built using Django and VueJs . A security vulnerability exists in G3W-SUITE version 3.5 that allows remote users to inject arbitrary web script or HTML and gain privileges via the description parameter...

5.4CVSS6AI score0.00566EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/07/07 12:0 a.m.8 views

PT-2023-22510 · Unknown · Gis3W G3W-Suite

Name of the Vulnerable Software and Affected Versions: Gis3W g3w-suite version 3.5 Description: A Cross-site scripting XSS vulnerability in the content editor allows remote authenticated users to inject arbitrary web script or HTML and gain privileges via the description parameter. Recommendation...

5.4CVSS5.2AI score0.00566EPSS
SaveExploits1References4
OSV
OSV
added 2023/06/27 6:15 p.m.6 views

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

5.4CVSS6.1AI score0.00813EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/06/27 6:15 p.m.4 views

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

5.4CVSS6.5AI score0.00813EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/06/27 12:0 a.m.15 views

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

7.2AI score0.00813EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/06/27 12:0 a.m.40 views

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

6AI score0.00813EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/06/27 12:0 a.m.9 views

MicroWorld Technologies eScan Management Console 跨站脚本漏洞

The MicroWorld Technologies eScan Management Console is an eScan management console from MicroWorld Technologies, Inc. A cross-site scripting vulnerability exists in Microworld Technologies eScan Management console version v.14.0.1400.2281, which originates from a vulnerability that allows a remo...

5.4CVSS6AI score0.00813EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/06/01 12:0 a.m.7 views

Guangdong Pythagorean OA Office System 跨站脚本漏洞

Guangdong Pythagorean OA Office System Gougu OA is a practical enterprise office system open source China Gouguopen gouguopen. A cross-site scripting vulnerability exists in Guangdong Pythagorean OA Office System versions prior to 4.50.31. The vulnerability stems from an unknown function in the...

5.4CVSS4.5AI score0.00564EPSS
SaveExploits1References4
Rows per page
Query Builder