EUVD-2020-0555

Malware in sbrugna...

TYPO3 dlf extension cross-site scripting vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. dlf extension is one of the digital library extensions. A cross-site scripting vulnerability exists in TYPO3 dlf extension version 3.1.1 and earlier versions, which stems from the lack of...

CVE-2020-16095

The dlf aka Kitodo.Presentation extension before 3.1.2 for TYPO3 allows XSS...

Cross site scripting

The dlf aka Kitodo.Presentation extension before 3.1.2 for TYPO3 allows XSS...

CVE-2020-16095

The CVE refers to the dlf (Kitodo.Presentation) TYPO3 extension, vulnerable to cross-site scripting (XSS) in versions before 3.1.2. The root cause involves insufficient sanitization/encoding of input affecting HTML output (notably in ListView and Navigation components). Impact is XSS in web pages...

socialbookmarkingeasy.com XSS vulnerability

Open Bug Bounty ID: OBB-560298 Description| Value ---|--- Affected Website:| socialbookmarkingeasy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...