Lucene search
K

5 matches found

RubySec
RubySec
added 2020/09/09 12:0 a.m.27 views

Potential XSS vulnerability in Action View

There is a potential Cross-Site Scripting XSS vulnerability in Action View's translation helpers. Views that allow the user to control the default not found value of the t and translate helpers could be susceptible to XSS attacks. Impact ------ When an HTML-unsafe string is passed as the default...

6.1CVSS1.8AI score0.01184EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2018/04/12 4:29 p.m.22 views

Design/Logic Flaw

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

3.5CVSS5.5AI score0.00955EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2018/04/12 4:29 p.m.0 views

DEBIAN-CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS6.3AI score0.00955EPSS
Exploits1References1
OSV
OSV
added 2018/04/12 4:29 p.m.27 views

CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS5.5AI score
Exploits0References4
Debian CVE
Debian CVE
added 2018/04/12 4:0 p.m.24 views

CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS5.2AI score0.00955EPSS
Exploits1
Rows per page
Query Builder