11 matches found
CVE-2020-19511
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...
CVE-2020-19511
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...
Cross site scripting
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...
CVE-2020-19511
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...
CVE-2020-19511
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...
CVE-2020-19511
CVE-2020-19511 affects Typesetter 5.1. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the index.php/Admin/Classes interface, specifically through the className and Description fields. Descriptions across multiple connected sources confirm the editable fields in the admin U...
PT-2021-3388
Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description The issue is related to a Cross Site Scripting vulnerability. It is associated with the failure to take measures to protect the structure of web pages, specifically through the className and Description field...
CVE-2020-19511: Improper Neutralization of Input During Web Page Generation
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...
CVE-2018-16626
CVE-2018-16626 affects Typesetter 5.1: index.php/Admin/Classes allows cross-site scripting via the description of a new class name. The vulnerability is an XSS in the class-creation workflow, arising from how the description field is processed in Admin/Classes. Public references in the connected ...
CVE-2018-16626: Improper Neutralization of Input During Web Page Generation
index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name...
PT-2019-9361
Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description The issue allows for XSS via the description of a new class name in the index.php/Admin/Classes endpoint. Recommendations For version 5.1, update to a newer version that contains a fix for this issue, or as a...