Cross site scripting

An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share description fields...

PYSEC-2017-17

Multiple cross-site scripting XSS vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 first name or 2 last name user details, or the 3 repository, 4 repository group, or 5 user group description...

CVE-2015-1864

Multiple cross-site scripting XSS vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 first name or 2 last name user details, or the 3 repository, 4 repository group, or 5 user group description...

PT-2017-6530

Name of the Vulnerable Software and Affected Versions Kallithea versions prior to 0.2.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administration pages. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific us...

Cross site scripting

Cross-site scripting XSS vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to inject arbitrary web script or HTML via a modified grouping description...

VFront 0.95m (need login) Persistant XSS Vunerability

Exploit for php platform in category web applications author: lemlajt software : VFront vendor: http://www.vfront.org/ version: 0.95m tested on: linux cve : PoC : Go to: http://192.168.1.123/www/cmsadmins/vfr/vfront-0.95m/admin/menuregistri.php?gid=0&modificagid&feed=modok In "Modify...