16185 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 discription or 2 comments field, related to users/userAddContent...
CVE-2018-16622
Multiple cross-site scripting XSS vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 discription or 2 comments field, related to users/userAddContent...
CVE-2018-15917
CVE-2018-15917 affects Jorani Leave Management System v0.6.5. The issue is a persistent XSS in the language parameter (session/language) that stores user input in the session, enabling an attacker to inject arbitrary script executed by other users (including admins). Evidence across sources confi...
Cross site scripting
Cross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0672
Movable Type suffers a Cross‑Site Scripting (CWE-79) vulnerability in versions prior to 6.3.1. The NVD/NVD-derived records indicate that remote attackers could inject arbitrary scripts via unspecified vectors, potentially executing in a user’s browser. Affected software: Movable Type (Six Apart) ...
Grammarly: Emails from Grammarly missing sanitization(lack of validation?) -> HTML injection in emails
Summary: Emails from Grammarly e.g. "reset password" email missing HTML sanitization. That leads to content spoofing in emails. Steps To Reproduce: 1. Go to "Profile" 2. Find reset password tab if you're logged in using FB/Google, you won't see this menu 3. Change email to something like:...
EPSON WF-2750 HTML Injection Vulnerability
The EPSON WF-2750 is a printer device from the Japanese company Epson EPSON. An HTML injection vulnerability exists in the AirPrint Setup page of the web interface in EPSON WF-2750 printers using firmware version JP02I2, which originates when the printer web server fails to properly check the...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
Design/Logic Flaw
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14899
CVE-2018-14899 affects the EPSON WF-2750 printer with firmware JP02I2. The Web interface AirPrint Setup page is vulnerable to HTML injection, enabling redirection of users to malicious sites. Multiple connected sources (NVD entry, CNVD, CNVD-style EUVD/NASL references, and Nessus/OT plugin contex...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2017-15429
Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
Design/Logic Flaw
Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
CVE-2018-15884
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...
CVE-2018-15608
Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...
CVE-2018-15608
Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...
CVE-2017-15430
Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...