CVE-2023-39971

CVE-2023-39971 is an XSS vulnerability in the AcyMailing Enterprise component for Joomla, caused by improper neutralization of input during web page generation. Affected versions are 6.7.0 through 8.6.3. Connected sources consistently describe the issue as cross-site scripting due to input handli...

CVE-2023-39971 Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...

AcyMailing Joomla Component 跨站脚本漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from improper input neutralization and allows cross-site scripting XSS...

PT-2023-27183 · Joomla · Acymailing Enterprise

Name of the Vulnerable Software and Affected Versions: AcyMailing Enterprise component for Joomla versions 6.7.0 through 8.6.3 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. This enables potential attackers to...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Stored XSS.This issue affects E-Commerce Software: before 11...

a2 License Portal System SQL Injection Vulnerability

a2 License Portal System is a license portal system from a2 License Portal System, Inc. A SQL injection vulnerability exists in a2 License Portal System versions prior to 1.48, which arises from incorrect neutralization of special elements used in SQL commands...

CVE-2023-38045 Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...

Admiror Gallery Cross-Site Scripting Vulnerability

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Admiror Gallery that originates from improper input neutralization during page generation...

SolarWinds Platform 2023.2.0 < 2023.3 Multiple Vulnerabilities

The version of SolarWinds Platform installed on the remote host is prior to 2023.3. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20233 advisory. - Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to...

CVE-2023-33229

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...

Input validation

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...

CVE-2023-33229 SolarWinds Platform Incorrect Input Neutralization Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...

CVE-2023-33229 SolarWinds Platform Incorrect Input Neutralization Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...

PT-2023-24234 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML, due to incorrect input neutralization...

CVE-2023-38435

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

Cross site scripting

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

CVE-2023-36502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...

CVE-2023-36502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...

CVE-2023-2960

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS.This issue affects Oliva Expertise EKS: before 1.2...

CVE-2023-2960

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS. This issue affects Oliva Expertise EKS: before 1.2...