EUVD-2020-0555

Malware in sbrugna...

TYPO3 dlf extension cross-site scripting vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. dlf extension is one of the digital library extensions. A cross-site scripting vulnerability exists in TYPO3 dlf extension version 3.1.1 and earlier versions, which stems from the lack of...

CVE-2020-16095

The dlf aka Kitodo.Presentation extension before 3.1.2 for TYPO3 allows XSS...

Cross site scripting

The dlf aka Kitodo.Presentation extension before 3.1.2 for TYPO3 allows XSS...

CVE-2020-16095

The CVE refers to the dlf (Kitodo.Presentation) TYPO3 extension, vulnerable to cross-site scripting (XSS) in versions before 3.1.2. The root cause involves insufficient sanitization/encoding of input affecting HTML output (notably in ListView and Navigation components). Impact is XSS in web pages...

CVE-2020-16095

The dlf aka Kitodo.Presentation extension before 3.1.2 for TYPO3 allows XSS...

PT-2020-14747

Name of the Vulnerable Software and Affected Versions dlf aka Kitodo.Presentation versions prior to 3.1.2 dlf aka Kitodo.Presentation version 2.3.1 and earlier in the 2.x branch Description The issue is related to Cross Site Scripting XSS due to the failure to properly encode URL parameters for...

CVE-2020-16095: Improper Neutralization of Input During Web Page Generation

The dlf aka Kitodo.Presentation extension before 3.1.2 for TYPO3 allows XSS...

socialbookmarkingeasy.com XSS vulnerability

Open Bug Bounty ID: OBB-560298 Description| Value ---|--- Affected Website:| socialbookmarkingeasy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...