PT-2024-20098 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 18.0.4 Description: Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. The vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendered...

Dolibarr Security Breach

Dolibarr is a software application. A modern software package that helps manage your organization's activities. A security vulnerability exists in Dolibarr version 18.0.4, which stems from an HTML injection vulnerability in the application's home page that allows an attacker to inject arbitrary...

DEBIAN-CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

Design/Logic Flaw

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

Html Injection

tuitse-tsusin is vulnerable to Html Injection. The vulnerability is due to the tuitsehtml function within html.py lacking proper escape or sanitization functionality for user-supplied data when incorporated into HTML output. This could allow attacker to inject malicious HTML or JavaScript code in...

CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

PT-2024-19540 · Kanboard +1 · Kanboard +1

Name of the Vulnerable Software and Affected Versions: Kanboard version 1.2.34 Description: The issue concerns Html Injection in the group management feature. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incident...

CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

CVE-2024-22720

Summary: CVE-2024-22720 affects Kanboard 1.2.34 and is described as an Html Injection vulnerability in the group management feature. The issue is confirmed in multiple feeds, with no explicit exploit details provided in the documents. CVSS metrics in the primary entry indicate a Medium impact wit...

CVE-2024-23341

TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...

Input validation

TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...

PYSEC-2024-22

TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...

PYSEC-2024-22

TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...

CVE-2024-23341 TuiTse-TsuSin html injection vulnerability in `tuitse_html` function

TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...

CVE-2024-23341

CVE-2024-23341 affects the TuiTse-TsuSin package. Before version 1.3.2, using tuitse_html without quoting the input enables a HTML injection vulnerability. A patch was released in version 1.3.2. Workarounds include sanitizing Taigi input with HTML quotation. Mitigations/impact are described in mu...

CVE-2024-23341 TuiTse-TsuSin html injection vulnerability in `tuitse_html` function

TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...

CVE-2024-23341 TuiTse-TsuSin html injection vulnerability in `tuitse_html` function

TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...

TuiTse-TsuSin Cross-Site Scripting Vulnerability

ithuan TuiTse-TsuSin is a library from the Chinese company ithuan. A cross-site scripting vulnerability exists in TuiTse-TsuSin versions prior to 1.3.2, which stems from an html injection vulnerability when using tuitsehtml without quoting input...