18369 matches found
CVE-2026-101270
Malicious HTML content could be injected into the help texts of various fields with organizer permissions...
EUVD-2026-88752
Malicious HTML content could be injected into the help texts of various fields with organizer permissions...
CVE-2026-101270 HTML injection
Malicious HTML content could be injected into the help texts of various fields with organizer permissions...
CVE-2026-101270
The software is vulnerable to HTML injection , where malicious HTML content can be injected into the help texts of various fields. This vulnerability is accessible to users with organizer permissions . No specific affected product versions or remediation steps are provided in the documents.
CVE-2026-101270 HTML injection
Malicious HTML content could be injected into the help texts of various fields with organizer permissions...
CVE-2024-23998
Another Redis Desktop Manager PoC Доказательство концепции для уязвимости CVE-2024-23998. 1. Обзор уязвимости: Тема уязвимости: Локальное выполнение кода через XSS Уязвимая версия: =...
CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS
CVE-2024-54160-OpenSearch HTML-инъекция + Хранимый XSS Было обнаружено, что плагин OpenSearch под названием "reports" был уязвим к HTML-инъекции в версии 2.18.0. Функциональность отчетов позволяла пользователям сохранять HTML в заголовке и подвале при создании нового определения отчета. Ниже...
CVE-2023-49052
CVE-2023-49052 - Microweber CMS v2.0.4 - Загрузка вредоносных файлов Описание В версии 2.0.4 CMS Microweber, когда в созданных формах активна опция загрузки файлов, существует возможность отправлять вредоносные HTML-файлы, даже если в этом поле применяются определённые типы проверок. Эта уязвимос...
CVE-2026-82326 HTML Injection in Enocta Educational's Enocta Platform
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28...
CVE-2026-82326
The Enocta Platform by Enocta Educational Technologies Inc. is vulnerable to a cross-site scripting (XSS) flaw due to improper neutralization of input during web page generation. Specifically, the vulnerability allows for XSS targeting HTML attributes . The impact is categorized as LOW for integr...
CVE-2026-82326 HTML Injection in Enocta Educational's Enocta Platform
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28...
CVE-2026-48849-Roundcube-Webmail-Stored-XSS
CVE-2026-48849 - Хранимый XSS, инъекция HTML и CSS в Roundcube Webmail Обзор Этот репозиторий содержит Proof-of-Concept PoC для CVE-2026-48849 — уязвимости хранимого межсайтового скриптинга XSS, инъекции HTML и CSS в Roundcube Webmail. Уязвимость позволяет сохранять управляемые злоумышленником...
CVE-2026-87752
A cross-site scripting (XSS) vulnerability exists in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis due to improper neutralization of input during web page generation. This flaw specifically allows XSS Targeting HTML Attributes . The vulnerability affects versions f...
CVE-2026-87752 HTML Injection in Rolantis Information Technologies' Agentis
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows XSS Targeting HTML Attributes. This issue affects Agentis: from 4.44 before 4.6...
CVE-2026-87752 HTML Injection in Rolantis Information Technologies' Agentis
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows XSS Targeting HTML Attributes. This issue affects Agentis: from 4.44 before 4.6...
CVE-2020-14965
CVE-2020-14965 ██╗ ██╗████████╗███╗ ███╗██╗ ██╗███╗ ██╗ ██╗███████╗ ██████╗████████╗██╗ ██████╗ ███╗ ██╗ ██║ ██║╚══██╔══╝████╗ ████║██║ ██║████╗ ██║ ██║██╔════╝██╔════╝╚══██╔══╝██║██╔═══██╗████╗ ██║ ███████║ ██║ ██╔████╔██║██║ ██║██╔██╗ ██║ ██║█████╗ ██║ ██║ ██║██║ ██║██╔██╗ ██║ ██╔══██║ ██║...
Leantime-POC
Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 Описание Следующие уязвимости были выявлены в версии 3.0.6 системы управления проектами Leantime, ориентированной на цели. CVE-2024-27474 Уязвимость межсайтовой подделки запросов CSRF, которая при срабатывании создает учетную запись и...
CVE-2021-46079
CVE-2021-46079 Название эксплойта: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Автор эксплойта: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH Ссылки: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection...
CVE-2026-51565
CVE-2026-51565 CVE-2026-51565 보안 권고 설명 Milk admin =0.9.8의 Modules/Docs/DocsController.php에 있는 사이트 간 스크립팅XSS 취약점으로 인해 원격 공격자가 조작된 요청의 action 매개변수를 통해 임의의 웹 스크립트 또는 HTML을 주입할 수 있습니다. 완화 조치 게시 시점 기준으로 이 취약점에 대한 공식 패치는 제작자로부터 제공되지 않았으며, 제가 이를 보고한 지 5개월이 지났습니다. 업데이트된 버전이 출시될 때까지는 취약한 action 매개변수를 노린 악...