CVE-2018-18692

A reflected Cross-Site scripting XSS vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML via the username parameter to the Login Form...

PT-2019-19349

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Appointment Booking Script version 3.0.3 Description The issue allows HTML injection in a user profile, which could potentially be used to inject malicious code. Recommendations For PHP Scripts Mall PHP Appointment Booking...

CVE-2019-9066: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...

The vulnerability of the Cisco Prime Network lifecycle management software allows a hacker to inject any HTML or JavaScript code into the loaded page.

The vulnerability of the Cisco Prime Network lifecycle management software is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to inject arbitrary HTML or JavaScript code into the uploaded page through a specially crafted link...

CVE-2018-20240

CVE-2018-20240 affects Atlassian Fisheye and Crucible prior to 4.7.0. The administrative linker functionality is vulnerable to stored XSS via the href parameter, enabling remote injection of arbitrary HTML/JavaScript. No exploitation details are provided beyond this description. Remediation: upgr...

CVE-2018-20241: Improper Neutralization of Input During Web Page Generation

The Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the wbuser parameter...

The vulnerability in the web interface of the operating system PAN-OS allows a hacker to inject any desired JavaScript or HTML code into the web page that is being uploaded.

The vulnerability of the PAN-OS operating system’s web interface exists due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code into the loaded web page from a remote location...

The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system allows a hacker to inject arbitrary web scripts or HTML code.

The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code, there...

The vulnerability of the PAN-OS operating system arises from insufficient protection of the web page structure, allowing attackers to inject any desired JavaScript or HTML code into the loaded web page.

The vulnerability of the PAN-OS operating system exists due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code into the loaded web page from a remote location...

Design/Logic Flaw

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361

The CVE-2019-8361 vulnerability affects PHP Scripts Mall’s Responsive Video News Script, where an XSS flaw in the Search Bar could enable HTML injection or URL redirection. Public details describe the vulnerability but do not provide exploit code, affected versions, or explicit remediation in the...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

PT-2019-18987

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Responsive Video News Script affected versions not specified Description The issue allows for XSS via the Search Bar, which could be used for HTML injection or URL redirection. Recommendations At the moment, there is no...

Cross-site Scripting (XSS)

onebox is susceptible to cross-site scripting XSS. The attack exists because it does not escape the albumtitle parameter, allowing the attacker to inject malicious HTML through it...

CVE-2018-20232: Improper Neutralization of Input During Web Page Generation

The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the rendering of retrieved content from a url location that could be...

E-mail HTML injection

More info at https://www.passbolt.com/incidents/20190211multiplevulnerabilities...

CVE-2017-1202

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677...

Design/Logic Flaw

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677...