Lucene search
K

17 matches found

OSV
OSV
added 2026/02/03 12:16 a.m.1 views

UBUNTU-CVE-2025-61642

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/CodexHTMLForm.Php, includes/htmlform/fields/HTMLButtonField.Php. This issue affects...

6.1CVSS5.8AI score0.00007EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/02 11:36 p.m.2 views

CVE-2025-61642 Stored XSS through system messages provided to CodexHtmlForms

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/CodexHTMLForm.Php, includes/htmlform/fields/HTMLButtonField.Php. This issue affects...

5.3AI score0.00007EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-3408

Malware in sbrugna...

4.3CVSS6.1AI score0.0065EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-2442

Malware in sbrugna...

4.3CVSS6.4AI score0.00256EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-5186

Malicious code in bioql PyPI...

6.1CVSS6.5AI score0.00371EPSS
Exploits0References11
OSV
OSV
added 2024/03/06 11:14 a.m.19 views

BIT-MEDIAWIKI-2020-25812

An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML...

6.1CVSS6.3AI score0.00371EPSS
Exploits0References5
OSV
OSV
added 2022/05/24 5:29 p.m.5 views

GHSA-RJ9P-8JXJ-2CH4 MediaWiki Cross-site Scripting (XSS) vulnerability

An issue was discovered in MediaWiki 1.34.x before 1.34.3. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML...

6.1CVSS6.4AI score0.00371EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2022/05/24 5:29 p.m.18 views

MediaWiki Cross-site Scripting (XSS) vulnerability

An issue was discovered in MediaWiki 1.34.x before 1.34.3. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML...

6.1CVSS5.5AI score0.00371EPSS
Exploits0References8Affected Software1
Veracode
Veracode
added 2020/12/06 4:19 a.m.29 views

Cross-site Scripting (XSS)

MediaWiki is vulnerable to cross-site scripting XSS. Allowing an attacker to modify messages is include raw HTML which NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier...

6.1CVSS1.4AI score0.00371EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2020/09/27 9:15 p.m.1 views

DEBIAN-CVE-2020-25812

An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML...

6.1CVSS6.6AI score0.00371EPSS
Exploits0References1
Prion
Prion
added 2020/09/27 9:15 p.m.16 views

Design/Logic Flaw

An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML...

4.3CVSS6.3AI score0.00371EPSS
Exploits0References4Affected Software2
Debian CVE
Debian CVE
added 2020/09/27 8:25 p.m.28 views

CVE-2020-25812

An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML...

6.1CVSS6.2AI score0.00371EPSS
Exploits0
0day.today
0day.today
added 2015/08/20 12:0 a.m.24 views

up.time 7.5.0 Superadmin Privilege Escalation Exploit

Exploit for php platform in category web applications i...

7.1AI score
Exploits0
NVD
NVD
added 2015/03/19 2:59 p.m.6 views

CVE-2015-2349

Cross-site scripting XSS vulnerability in defaultnewsletter.php in SuperWebMailer 5.60.0.01190 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTMLForm parameter...

4.3CVSS5.7AI score0.00256EPSS
Exploits0References4
Prion
Prion
added 2015/03/19 2:59 p.m.10 views

Cross site scripting

Cross-site scripting XSS vulnerability in defaultnewsletter.php in SuperWebMailer 5.60.0.01190 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTMLForm parameter...

4.3CVSS6.2AI score0.00256EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2015/03/19 2:0 p.m.14 views

CVE-2015-2349

Cross-site scripting XSS vulnerability in defaultnewsletter.php in SuperWebMailer 5.60.0.01190 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTMLForm parameter...

5.7AI score0.00256EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2015/03/11 12:0 a.m.35 views

SuperWebMailer 5.50.0.01160 Cross Site Scripting

SuperWebMailer 5.50.0.01160 XSS Cross-site Scripting Security Vulnerabilities Exploit Title: SuperWebMailer /defaultnewsletter.php" HTMLForm Parameter XSS Security Vulnerabilities Product: SuperWebMailer Vendor: SuperWebMailer Vulnerable Versions: 5..0. 4..0. Tested Version: 5..0. 4..0. Advisory...

7.4AI score
Exploits0
Rows per page
Query Builder