CVE-2026-34417 OSCAL-GUI Reflected XSS via project parameter in oscal-forms.php

OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious content through the project request parameter in oscal-forms.php. The parameter value is URL-decoded and assigned to...

CVE-2026-34417: Improper Neutralization of Input During Web Page Generation

OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious content through the project request parameter in oscal-forms.php. The parameter value is URL-decoded and assigned to...

EUVD-2014-8582

Malware in sbrugna...

Cross-Site Scripting (XSS)

spipu/html2pdf is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to lack of sanitization in forms.php which allows an attacker to inject and execute arbitrary JavaScript...

GHSA-99FG-2H75-M92H Spipu HTML2PDF vulnerable to cross-site scripting

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php...

Spipu HTML2PDF vulnerable to cross-site scripting

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php...

CVE-2023-39062

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php...

CVE-2023-39062

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php...

CVE-2023-39062

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php...

CVE-2023-39062: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php...

PT-2023-26768

Name of the Vulnerable Software and Affected Versions Spipu HTML2PDF versions prior to 5.2.8 Description The issue allows a remote attacker to execute arbitrary code via a crafted script to the "forms.php" endpoint. This is a Cross Site Scripting vulnerability. Recommendations For versions prior ...

Spipu HTML2PDF Cross-Site Scripting Vulnerability

Spipu Html2Pdf is an open source Html to Pdf converter written in Php by Laurent Minguet, an individual developer in France. A security vulnerability exists in versions prior to Spipu HTML2PDF v.5.2.8, which stems from the presence of a cross-site scripting vulnerability that allows remote...

CVE-2013-10020

A vulnerability, which was classified as problematic, was found in MMDeveloper A Forms Plugin up to 1.4.2 on WordPress. This affects an unknown part of the file a-forms.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.3 ...

CVE-2013-10020: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in MMDeveloper A Forms Plugin up to 1.4.2 on WordPress. This affects an unknown part of the file a-forms.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.3 ...

codezone.pt XSS vulnerability

Vulnerable URL: http://www.codezone.pt/forms.php?s='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18539049 VIP website status:| No Check codezone.pt SSL connection:| Grade: A...

PT-2017-7404

Name of the Vulnerable Software and Affected Versions Bitrix orion.extfeedbackform module versions prior to 2.1.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the order or "by" parameter to the "admin/orion.extfeedbackform efbf...

darkeprobatejuvenile.org XSS vulnerability

Vulnerable URL: http://www.darkeprobatejuvenile.org/forms.php?agencynumber=1"...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in goYWP WebPress 13.00.06 allow remote attackers to inject arbitrary web script or HTML via the 1 searchparam parameter to search.php or 2 name, 3 address, or 4 comment parameter to forms.php...

CVE-2014-8751

Multiple cross-site scripting XSS vulnerabilities in goYWP WebPress 13.00.06 allow remote attackers to inject arbitrary web script or HTML via the 1 searchparam parameter to search.php or 2 name, 3 address, or 4 comment parameter to forms.php...

CVE-2014-8751

GoYWP WebPress 13.00.06 is affected by multiple XSS vulnerabilities (CVE-2014-8751). The issues allow remote attackers to inject arbitrary web script or HTML via the following inputs: (1) search.php with the search_param parameter, and (2) forms.php with the name, address, or comment parameters. ...