Lucene search
+L

3024 matches found

Positive Technologies
Positive Technologies
added 2025/06/10 12:00 a.m.9 views

PT-2025-24964 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses ...

5.5CVSS5.3AI score0.00273EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.11 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a comprehensive content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from the vulnerability of form fields to stored cross-site scripting attacks. An attacker can exploit the vulnerability to cause...

5.4CVSS6.1AI score0.00271EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.8 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a comprehensive content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from the vulnerability of form fields to stored cross-site scripting attacks. An attacker can exploit the vulnerability to cause...

5.4CVSS6.1AI score0.00266EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.7 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a comprehensive content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from the vulnerability of form fields to stored cross-site scripting attacks. An attacker can exploit the vulnerability to cause...

4.6CVSS6.1AI score0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.7 views

Adobe Experience Manager(AEM) 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.6AI score0.00271EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.9 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a comprehensive content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from the vulnerability of form fields to stored cross-site scripting attacks. An attacker can exploit the vulnerability to cause...

5.4CVSS6.1AI score0.00273EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.8 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a comprehensive content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from the vulnerability of form fields to stored cross-site scripting attacks. An attacker can exploit the vulnerability to cause...

4.8CVSS6.1AI score0.00272EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.8 views

Adobe Experience Manager(AEM) 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.8AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/06/10 12:00 a.m.10 views

PT-2025-24991 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses ...

5.5CVSS5.2AI score0.00266EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.5 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a comprehensive content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from the vulnerability of form fields to stored cross-site scripting attacks. An attacker can exploit the vulnerability to cause...

5.4CVSS6.1AI score0.00295EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.8 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a comprehensive content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from the vulnerability of form fields to stored cross-site scripting attacks. An attacker can exploit the vulnerability to cause...

5.4CVSS6.1AI score0.0029EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/06/10 12:00 a.m.4 views

PT-2025-25141 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses ...

5.5CVSS5.2AI score0.00273EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/06/10 12:00 a.m.10 views

PT-2025-25037 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses ...

5.5CVSS5.2AI score0.00266EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 9:50 a.m.10 views

CVE-2024-7649

The Opal Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via checkout form fields in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

6.1CVSS6.1AI score0.0049EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:50 p.m.13 views

CVE-2022-4196

The Multi Step Form WordPress plugin before 1.7.8 does not sanitise and escape some of its form fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.7AI score0.0047EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:35 p.m.3 views

CVE-2021-36063

Adobe Connect version 11.2.2 and earlier is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing th...

6.1CVSS5.4AI score0.0135EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:37 p.m.11 views

CVE-2021-35061

Multiple cross-site scripting XSS vulnerabilities in DRK Odenwaldkreis Testerfassung March-2021 allow remote attackers to inject arbitrary web script or HTML via all parameters to HTML form fields in all components...

6.1CVSS6AI score0.00937EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:25 p.m.10 views

CVE-2002-1868

Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields...

10CVSS8.1AI score0.0544EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/15 9:14 p.m.10 views

CVE-2025-30314

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing t...

6.1CVSS5.3AI score0.00348EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:00 a.m.12 views

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of Adobe Connect web conferencing software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS by injecting malicious scripts into form fields...

9.4CVSS5.2AI score0.00488EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder