CVE-2022-46438

A cross-site scripting XSS vulnerability in the /admin/articlecategory.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter...

CVE-2020-26218

touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious webpage/website etc. The issue is patched in version 2.0...

PT-2020-16347

Name of the Vulnerable Software and Affected Versions touchbase.ai versions prior to 2.0 Description The issue allows an attacker to inject HTML payloads, which could result in defacement, user redirection to a malicious webpage or website. Recommendations For versions prior to 2.0, update to...