280 matches found
CVE-2022-30776
atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...
CVE-2022-30776
atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...
CVE-2022-30776
atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...
PT-2022-20310
Name of the Vulnerable Software and Affected Versions atmail version 6.5.0 Description The issue allows for XSS via the "index.php/admin/index/" endpoint, specifically through the error parameter. Recommendations For atmail version 6.5.0, consider restricting access to the "index.php/admin/index/...
CVE-2022-30776: Improper Neutralization of Input During Web Page Generation
atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...
CVE-2021-24996
The IDPay for Contact Form 7 WordPress plugin through 2.1.2 does not sanitise and escape the idpayerror parameter before outputting it back in the page leading to a Reflected Cross-Site Scripting...
CVE-2021-25112
The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting...
CVE-2021-25112: Improper Neutralization of Input During Web Page Generation
The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting...
PT-2022-9667
Name of the Vulnerable Software and Affected Versions WHMCS Bridge WordPress plugin versions prior to 6.4b Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the error parameter is not properly sanitized and escaped before being outputted back in the admin...
CVE-2021-25035
The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
Cross site scripting
The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
PT-2022-9592
Name of the Vulnerable Software and Affected Versions Backup and Staging by WP Time Capsule WordPress plugin versions prior to 1.22.7 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the error parameter is not properly sanitised and escaped before...
CVE-2021-25035: Improper Neutralization of Input During Web Page Generation
The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
Cross site scripting
Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester Tailor Management 1.0 via the 1 eid parameter in a partedit.php and b customeredit.php, the 2 id parameter in a editmeasurement.php and b addpayment.php, and the 3 error parameter in index.php...
CVE-2021-40260
Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester Tailor Management 1.0 via the 1 eid parameter in a partedit.php and b customeredit.php, the 2 id parameter in a editmeasurement.php and b addpayment.php, and the 3 error parameter in index.php...
CVE-2021-42566
myfactory.FMS before 7.1-912 allows XSS via the Error parameter...
CVE-2021-42566
myfactory.FMS before 7.1-912 allows XSS via the Error parameter...
CVE-2021-42566
myfactory.FMS before 7.1-912 allows XSS via the Error parameter...