Lucene search
+L

210 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/13 12:00 a.m.•3 views

CVE-2021-30637: Improper Neutralization of Input During Web Page Generation

htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php...

5.4CVSS5.8AI score0.01898EPSS
SaveExploits4References2
CNNVD
CNNVD
•added 2021/04/13 12:00 a.m.•15 views

HTMLy 跨站脚本漏洞

HTMLy is a PHP-based open source blogging platform. A cross-site scripting vulnerability exists in htmly 2.8.0, which originates from config.html.php...

5.4CVSS5.4AI score0.01898EPSS
SaveExploits4References6
OSV
OSV
•added 2019/05/08 2:29 p.m.•24 views

CVE-2019-8349

Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...

6.1CVSS6AI score
SaveExploits0References3
NVD
NVD
•added 2019/05/08 2:29 p.m.•47 views

CVE-2019-8349

Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...

6.1CVSS6.1AI score0.02184EPSS
SaveExploits3References3
Prion
Prion
•added 2019/05/08 2:29 p.m.•30 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...

4.3CVSS6AI score0.02184EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
•added 2019/05/08 1:24 p.m.•46 views

CVE-2019-8349

Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...

6.1AI score0.02184EPSS
SaveExploits3References3
CVE
CVE
•added 2019/05/08 1:24 p.m.•64 views

CVE-2019-8349

Multiple XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary scripts via (1) destination parameter to delete and (2) destination parameter to edit, and via the content parameter in the profile feature. Affected product: HTMLy 2.7.4. Root cause: input handling in the dele...

6.1CVSS6AI score0.02184EPSS
SaveExploits3References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/08 12:00 a.m.•6 views

CVE-2019-8349: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...

6.1CVSS5.8AI score0.02184EPSS
SaveExploits3References2
zdt
zdt
•added 2019/02/18 12:00 a.m.•55 views

HTMLy 2.7.4 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Affected Software: HTMLy Affected Versions: 2.7.4 Homepage:...

6.4AI score0.02184EPSS
SaveExploits3
Packet Storm
Packet Storm
•added 2019/02/18 12:00 a.m.•116 views

HTMLy 2.7.4 Cross Site Scripting

Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Affected Software: HTMLy Affected Versions: 2.7.4 Homepage: https://github.com/danpros/htmly Vulnerability: Cross-Site...

6.4AI score0.02184EPSS
SaveExploits3
Rows per page
Query Builder