CVE-2023-38969

Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title parameter in the new book and edit book function...

PT-2021-23336

Name of the Vulnerable Software and Affected Versions Tad Book3 affected versions not specified Description The editing book function in Tad Book3 does not filter special characters, allowing unauthenticated attackers to remotely inject JavaScript syntax and execute stored XSS attacks...