EUVD-2021-30373

Malicious code in bioql PyPI...

EUVD-2021-30374

Malicious code in bioql PyPI...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

Cross site scripting

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

Design/Logic Flaw

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

CVE-2021-43441

CVE-2021-43441 affects iOrder 1.0 with an HTML Injection vulnerability in the signup form. Public references consistently describe an HTML injection that could allow an attacker to render arbitrary HTML when a user submits the signup form. CVSS metrics (NVD) show a base score around 5.3 (3.1) wit...

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

CVE-2021-43440

CVE-2021-43440 affects iOrder 1.0. The vulnerability is multiple stored XSS flaws in the signup form (Name and Phone fields) that could allow remote attackers to execute arbitrary code. The NVD entry confirms a stored XSS issue with a baseline impact of partial integrity loss and no confidentiali...

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

PT-2021-23846

Name of the Vulnerable Software and Affected Versions iOrder version 1.0 Description The issue allows remote attackers to execute arbitrary code via the signup form in the Name and Phone number fields. This is due to multiple stored XSS vulnerabilities in the source code. Recommendations For iOrd...

CVE-2021-43440: Improper Neutralization of Input During Web Page Generation

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

CVE-2021-43441: Improper Neutralization of Input During Web Page Generation

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...