CVE-2020-20990

A cross site scripting XSS vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter...

PT-2021-10570

Name of the Vulnerable Software and Affected Versions: Domainmod version 4.13 Description: A cross-site scripting XSS issue in the /segments/edit.php component allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter. This enables attackers to potentially manipulat...

CVE-2020-20990: Improper Neutralization of Input During Web Page Generation

A cross site scripting XSS vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter...

CVE-2021-24498: Improper Neutralization of Input During Web Page Generation

The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the page via php/edit.php, leading to a reflected Cross-Site Scripting issue...

Design/Logic Flaw

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

PT-2021-16459

Name of the Vulnerable Software and Affected Versions: SourceCodester Ordering System version 1.0 Description: The issue allows attackers to execute arbitrary code via the file upload to "ordering/admin/products/edit.php". This is an arbitrary file upload vulnerability. Recommendations: For...

CVE-2021-25211: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The plugin does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the page via php/edit.php, leading to a reflected Cross-Site Scripting issue. PoC https://www.example.com/?cpmvcid=1doaction=mvparse=editindex=0=1=0=F00=1=999=a%22%3E%3Csvg/%3E%3C%22...

CVE-2020-20389

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

CVE-2020-20389

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

CVE-2020-20389

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

CVE-2020-20389

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

PT-2021-10486

Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: A Cross Site Scripting XSS issue exists in the admin/edit.php file. Recommendations: For GetSimpleCMS version 3.4.0a, update to a newer version that contains a fix for this issue...

CVE-2020-20389: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

PT-2021-10495

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue is related to a SQL injection vulnerability. It stems from the log edit.php files failing to filter the csa to user parameter. Remote attackers can exploit this to obtain database...

PT-2021-10497

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue allows remote attackers to exploit an unauthorized access vulnerability in the default user edit.php file to escalate to admin privileges. Recommendations: For White Shark System WSS...

CVE-2020-17999: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

PT-2021-10115

Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.10 Description: The issue allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the "/mc-admin/post-edit.php" API endpoint. This is a result of a Cross Site Scripting XSS flaw...

MiniCMS cross-site scripting vulnerability

MiniCMS is a content management system CMS designed for personal websites. A security vulnerability exists in MiniCMS v1.10 that allows remote attackers to execute arbitrary code by sending a crafted HTTP request injection command to the component "mc-admin post-edit.php"...

PT-2021-17677

Name of the Vulnerable Software and Affected Versions: pfSense version 2.5.0 Description: The issue allows for stored Cross-Site Scripting XSS via the Description field in the services wol edit.php file. Recommendations: For pfSense version 2.5.0, update to a version that includes a fix for this...