355 matches found
CVE-2024-50572
A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.2, SCALANCE...
PT-2024-33095 · Unknown · Aiml Chatbot
Name of the Vulnerable Software and Affected Versions: AIML Chatbot versions prior to 2.0 Description: The issue is related to Cross Site Scripting XSS, where attackers can inject malicious HTML or JavaScript code through the message input field. The chatbot fails to sanitize these inputs, leadin...
CVE-2024-41519
Feripro /zuordnung/veranstaltungen/" through the "school" input field...
CVE-2024-41519
Feripro /zuordnung/veranstaltungen/" through the "school" input field...
CVE-2024-41519
Feripro /zuordnung/veranstaltungen/" through the "school" input field...
PT-2024-29437 · Feripro · Feripro
Name of the Vulnerable Software and Affected Versions: Feripro versions prior to 2.2.4 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the "/admin/programm//zuordnung/veranstaltungen/" endpoint through the school input field. Recommendations: For...
CVE-2024-41519
Feripro <= v2.2.3 is affected by a Cross-Site Scripting (XSS) vulnerability in the admin endpoint used for program/ Veranstalungen mapping, exploitable via the school input field at /admin/programm//zuordnung/veranstaltungen/. Multiple sources confirm the issue affects Feripro 2.2.3 and earlie...
CVE-2024-4353 Stored XSS in Generate Board Name Input Field
Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in the generate dashboard board instance functionality. The Name input field does not check the input sufficiently letting a rogue administrator have the capability to inject malicious JavaScript code. The Concre...
CVE-2024-4353
Concrete CMS versions 9.0.0–9.3.2 are affected by a stored XSS in the generate dashboard board instance functionality. The Name input field allows injection of JavaScript because input is not sufficiently validated, enabling a rogue administrator to execute code. Affected product: Concrete CMS (v...
CVE-2024-39173
calculator-boilerplate v1.0 was discovered to contain a remote code execution RCE vulnerability via the eval function at /routes/calculator.js. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the input field...
CVE-2024-39173
calculator-boilerplate v1.0 was discovered to contain a remote code execution RCE vulnerability via the eval function at /routes/calculator.js. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the input field...
Cross Site Scripting (XSS)
sulu/form-bundle is vulnerable to Cross Site Scripting XSS. The vulnerability is due to the TokenController improperly sanitizating the formName parameter which is returned in the input field...
PT-2024-40034 · Ez Systems · Ez Publish Legacy
Name of the Vulnerable Software and Affected Versions: eZ Publish Legacy affected versions not specified Description: The issue concerns a vulnerability in eZ Publish Legacy that could lead to XSS injection in certain configurations, particularly when all modules are disabled. This vulnerability...
CVE-2024-30952
A stored cross-site scripting XSS vulnerability in PESCMS-TEAM v2.3.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the domain input field under /youdoamin/?g=Team&m=Setting&a=action...
CVE-2024-30952
A stored cross-site scripting XSS vulnerability in PESCMS-TEAM v2.3.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the domain input field under /youdoamin/?g=Team&m=Setting&a=action...
CVE-2024-30952
PESCMS-TEAM v2.3.6 contains a stored XSS vulnerability exploitable via a crafted payload in the domain input field at /youdoamin/?g=Team&m=Setting&a=action. Affected component: domain input handling in the API endpoint; impact: execution of arbitrary web scripts/HTML. Some sources mention a tempo...
CVE-2024-31063
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field...
CVE-2024-31065
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field...
