6 matches found
EUVD-2025-208155
Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting XSS vulnerability exists due to insufficient sanitization of CSV filenames. An attacker can upload a maliciously named CSV file e.g., .csv that leads to JavaScript execution when viewed by...
4.8CVSS5.9AI score0.00295EPSS
SaveExploits1References3
EUVD-2018-2157
Malware in sbrugna...
6.1CVSS6.3AI score0.01275EPSS
SaveExploits0References2
Cross site scripting
Cross-site scripting XSS vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature...
4.3CVSS6AI score0.01275EPSS
SaveExploits0References1Affected Software1
CVE-2018-10075
Cross-site scripting XSS vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature...
6.1CVSS5.9AI score0.01275EPSS
SaveExploits0References1
20