PT-2022-15069

Name of the Vulnerable Software and Affected Versions Advanced Database Cleaner WordPress plugin versions prior to 3.1.1 Description The issue is related to Reflected Cross-Site Scripting. It occurs because the plugin does not properly escape numerous generated URLs before outputting them back in...

CVE-2022-2173: Improper Neutralization of Input During Web Page Generation

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting...

PT-2020-21395

Name of the Vulnerable Software and Affected Versions react-marked-markdown versions affected versions not specified Description The issue concerns cross-site scripting XSS via href attributes in react-marked-markdown. This can be exploited when a user is provided to react-marked-markdown. There ...

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

PT-2020-14608

Name of the Vulnerable Software and Affected Versions RosarioSIS versions prior to 6.8-beta Description The issue is related to a problem with the href attributes for "AddStudents.php" and "User.php" in the NotifyParents.php file within the Custom module, allowing for XSS attacks. Recommendations...

CVE-2020-15721: Improper Neutralization of Input During Web Page Generation

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

Cross-Site Scripting

Overview All versions of react-marked-markdown are vulnerable to cross-site scripting XSS via href attributes. This is exploitable if user is provided to react-marked-markdown Proof of concept: import React from 'react' import ReactDOM from 'react-dom' import MarkdownPreview from...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to no proper sanitization of xlink:href attributes. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise trusted website. Th...