11 matches found
EUVD-2025-37834
EUVD-2025-37834...
EUVD-2022-50177
Malicious code in bioql PyPI...
EUVD-2025-28997
Malicious code in bioql PyPI...
CVE-2023-50072
A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...
CVE-2022-47414: Improper Neutralization of Input During Web Page Generation
If an attacker has access to the console for OpenKM and is authenticated, a stored XSS vulnerability is reachable in the document "note" functionality...
PT-2023-15294
Name of the Vulnerable Software and Affected Versions OpenKM affected versions not specified Description A stored XSS issue is present in the document "note" functionality of OpenKM, accessible if an attacker has console access and is authenticated. Recommendations At the moment, there is no...
CVE-2013-6232
Cross-site scripting XSS vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page...
Cross site scripting
Cross-site scripting XSS vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page...
CVE-2013-6232
Cross-site scripting XSS vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page...
PT-2014-3069
Name of the Vulnerable Software and Affected Versions SpagoBI versions prior to 4.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page, which is a cross-site scripting XSS vulnerability. Recommendations For...
CVE-2013-6232: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page...