Lucene search
K

5 matches found

OSV
OSV
added 2020/09/01 3:55 p.m.34 views

GHSA-FWCW-5QW2-87MP fuelux vulnerable to Cross-Site Scripting in Pillbox feature

Affected versions of fuelux contain a cross-site scripting vulnerability in the Pillbox feature. By supplying a script as a value for a new pillbox, it is possible to cause arbitrary script execution. Recommendation Update to version 3.15.7 or later...

6.1AI score
Exploits0References5
Github Security Blog
Github Security Blog
added 2020/09/01 3:55 p.m.26 views

fuelux vulnerable to Cross-Site Scripting in Pillbox feature

Affected versions of fuelux contain a cross-site scripting vulnerability in the Pillbox feature. By supplying a script as a value for a new pillbox, it is possible to cause arbitrary script execution. Recommendation Update to version 3.15.7 or later...

4.2AI score
Exploits0References5Affected Software1
Veracode
Veracode
added 2018/08/15 2:58 a.m.10 views

Cross-Site Scripting (XSS)

fuelux is vulnerable to cross-site scripting XSS vulnerability. It is possible because it allows the name parameter of DE in the email admin screen to directly render as HTML...

5.7AI score
Exploits0
Veracode
Veracode
added 2017/05/19 5:0 a.m.7 views

Cross-site Scripting (XSS)

fuelux is vulnerable to cross-site scripting XSS attacks. The library does not sanitise input in the rows in the repeater, allowing a malicious user can execute arbitrary script by using the...

6.1AI score
Exploits0
Node.js
Node.js
added 2016/07/25 4:43 p.m.23 views

Cross-Site Scripting

Overview Affected versions of fuelux contain a cross-site scripting vulnerability in the Pillbox feature. By supplying a script as a value for a new pillbox, it is possible to cause arbitrary script execution. Recommendation Update to version 3.15.7 or later. References - Issue 1841 - PR 1856 -...

4.9AI score
Exploits0Affected Software1
Rows per page
Query Builder