Lucene search
+L

5 matches found

RubySec
RubySec
added 2020/09/09 12:0 a.m.48 views

Potential XSS vulnerability in Action View

There is a potential Cross-Site Scripting XSS vulnerability in Action View's translation helpers. Views that allow the user to control the default not found value of the t and translate helpers could be susceptible to XSS attacks. Impact ------ When an HTML-unsafe string is passed as the default...

6.1CVSS1.8AI score0.02372EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/04/12 4:29 p.m.30 views

CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS5.5AI score
SaveExploits0References4
Prion
Prion
added 2018/04/12 4:29 p.m.25 views

Design/Logic Flaw

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

3.5CVSS5.5AI score0.01051EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2018/04/12 4:29 p.m.3 views

DEBIAN-CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS6.3AI score0.01051EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2018/04/12 4:0 p.m.48 views

CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS5.2AI score0.01051EPSS
SaveExploits1
Rows per page
Query Builder