CVE-2022-29969

The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true...

CVE-2020-23617: Improper Neutralization of Input During Web Page Generation

A cross site scripting XSS vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element...

CVE-2022-29969: Improper Neutralization of Input During Web Page Generation

The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true...

PT-2022-8687

Name of the Vulnerable Software and Affected Versions Totolink N200RE and N100RE Routers version 2.0 Description A cross site scripting XSS vulnerability in the error page of the routers allows attackers to execute arbitrary web scripts or HTML via SCRIPT element. Recommendations For Totolink...

PT-2022-19933

Name of the Vulnerable Software and Affected Versions MediaWiki RSS extension versions prior to 2022-04-29 Description The issue allows XSS via an rss element if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true. Recommendations For versions prior to 2022-04-29, update to a version...

MediaWiki cross-site scripting vulnerabilities

MediaWiki is a web-based wiki engine from the MediaWiki Foundation in the United States. The product can be used to deploy internal knowledge management and content management systems.A cross-site scripting vulnerability exists in versions of MediaWiki prior to 2022-04-29, which stems from an RSS...

element-plus vulnerable to cross-site scripting (XSS) via el-table-column

element-plus below 2.0.5 is vulnerable to Cross Site Scripting XSS when attribute show-tooltips-overflow of el-table-column is true. The mouseover action will make the text of this column render as html...

@advanced-elements/table (>=2.0.6, <=2.0.10), @ahcui/vue3-multiplex (1.0.0-rc2) +20 more potentially affected by CVE-2022-27103 via element-plus (>=2.0.0, <=2.0.5)

element-plus NPM version =2.0.0, =2.0.6, =1.0.0-beta.1, =0.1.2, =0.1.7, =1.0.1, =1.1.8, =2.7.24, =0.5.14, =1.0.2, =0.1.61, =1.1.2, =1.0.0, =1.0.1 and more Source cves: CVE-2022-27103 Source advisory: OSV:GHSA-RJVG-8V36-XV9R...

@advanced-elements/table (>=2.0.6, <=2.0.10), @ahcui/vue3-multiplex (1.0.0-rc2) +20 more potentially affected by CVE-2022-27103 via element-plus (>=2.0.0, <=2.0.5)

element-plus NPM version =2.0.0, =2.0.6, =1.0.0-beta.1, =0.1.2, =0.1.7, =1.0.1, =1.1.8, =2.7.24, =0.5.14, =1.0.2, =0.1.61, =1.1.2, =1.0.0, =1.0.1 and more Source cves: CVE-2022-27103 Source advisory: GHSA-RJVG-8V36-XV9R...

GHSA-RJVG-8V36-XV9R element-plus vulnerable to cross-site scripting (XSS) via el-table-column

element-plus below 2.0.5 is vulnerable to Cross Site Scripting XSS when attribute show-tooltips-overflow of el-table-column is true. The mouseover action will make the text of this column render as html...

Vulnerabilities fixed in FreeRADIUS

Two vulnerabilities have been fixed in FreeRADIUS. The vulnerabilities allow a malicious party to cause a denial-of-service or to obtain sensitive data obtain. To cause the denial-of-service, the malicious party must possess a system in the FreeRADIUS "circle of trust." The developers of FreeRADI...

CVE-2022-27103

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

CVE-2022-27103

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

Cross site scripting

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

CVE-2022-27103

CVE-2022-27103 affects element-plus 2.0.5, with a Cross Site Scripting (XSS) flaw exposed through el-table-column. The root cause described in the included records is inadequate sanitization/filtering of el-table-column content, allowing injected script execution. Multiple sources (CNNVD citing l...

CVE-2022-27103

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

CVE-2022-27103

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

@17mkh/ui (0.0.2), @advanced-elements/table (>=2.0.1, <=2.0.10) +654 more potentially affected by CVE-2022-27103 via element-plus (>=1.0.1-beta.0, <=2.0.5)

element-plus NPM version =1.0.1-beta.0, =2.0.1, =0.0.1, =0.0.1, =0.0.1, =0.6.6, =0.3.3, =0.0.1, =0.0.1, =0.1.15, =0.0.1, =0.0.1, =3.5.0 and more Source cves: CVE-2022-27103 Source advisory: MEND:CVE-2022-27103...

CVE-2022-27103: Improper Neutralization of Input During Web Page Generation

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

PT-2025-8359

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where a stale list iterator could be dereferenced after a loop, potentially leading to out-of-bounds or undefined values being loaded. Thi...