EUVD-2022-41573

Malicious code in bioql PyPI...

CVE-2022-39027 e-Excellence Inc. U-Office Force - Stored XSS

U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS Stored Cross-Site Scripting attack...

CVE-2022-39027: Improper Neutralization of Input During Web Page Generation

U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS Stored Cross-Site Scripting attack...

PT-2022-24683 · U-Office · U-Office

Name of the Vulnerable Software and Affected Versions: U-Office affected versions not specified Description: The issue concerns insufficient filtering for special characters in the Force Forum function, allowing a remote attacker with general user privileges to inject JavaScript. This enables the...