751 matches found
CVE-2021-27368: Improper Neutralization of Input During Web Page Generation
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
PT-2021-17415
Name of the Vulnerable Software and Affected Versions Monica version 2.19.1 Description The issue concerns a stored XSS vulnerability in the Contact page, specifically via the First Name field. This allows for malicious script execution when a user inputs tainted data into this field...
Monica 跨站脚本漏洞
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
Glovo: Server Side Template Injection on Name parameter during Sign Up process
Summary: Server-side template injection is when an attacker is able to use native template syntax to inject a malicious payload into a template, which is then executed server-side. In this scenario, when an attacker signs up on the platform and uses a payload in the First Name field, the payload ...
CVE-2020-36115
Stored Cross Site Scripting XSS vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'...
CVE-2020-36115
Stored Cross Site Scripting XSS vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'...
PT-2021-11916
Name of the Vulnerable Software and Affected Versions: EGavilan Media CRUD Operation affected versions not specified Description: The issue is related to a Stored Cross Site Scripting XSS vulnerability. It occurs via the First Name or Last Name parameter in the 'Add New Record Feature'. This allo...
EGavilan Media CRUD Operation Cross-Site Scripting Vulnerability
EGavilan Media CRUD Operation is a Php-based website builder from EGavilan Media. A cross-site scripting vulnerability exists in EGavilan Media CRUD Operation, which originates from the "Add New Record Function" via the First Name or Last Name parameter...
CVE-2020-36115: Improper Neutralization of Input During Web Page Generation
Stored Cross Site Scripting XSS vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'...
CASAP Automated Enrollment System 1.0 Cross Site Scripting
Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Exploit Author: Anita Gaud Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...
CVE-2020-35271
Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Employees, First Name and Last Name fields...
PT-2021-11743
Name of the Vulnerable Software and Affected Versions: Employee Performance Evaluation System in PHP/MySQLi with Source Code version 1.0 Description: The issue concerns cross-site scripting XSS in the Employees, First Name, and Last Name fields. This means that an attacker could potentially injec...
Employee Performance Evaluation System Cross-Site Scripting Vulnerability
SourceCodester Employee Performance Evaluation System is a Php-based website builder for employee performance management from SourceCodester, Inc. A cross-site scripting vulnerability exists in the Employee Performance Evaluation System that originates in the First Name and Last Name fields of...
CVE-2020-35271: Improper Neutralization of Input During Web Page Generation
Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Employees, First Name and Last Name fields...
PT-2021-11832 · Quest · Quest Policy Authority
Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to store malicious code in multiple fields, such as first name, last name, and logon name, when creating or modifying a user via the "submitUser.jsp" file...
CVE-2020-35720: Improper Neutralization of Input During Web Page Generation
Stored XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to store malicious code in multiple fields first name, last name, and logon name when creating or modifying a user via the submitUser.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the...
PT-2020-16217 · Limesurvey · Limesurvey
Name of the Vulnerable Software and Affected Versions: LimeSurvey version 3.21.1 Description: The issue concerns cross-site scripting XSS in the Add Participants Function, specifically affecting the First and last name parameters. When a survey participant is being edited, for instance by an...
CVE-2019-16957
SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account...
