5747 matches found
CVE-2023-1154 XSS in Pacsrapor
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pacsrapor allows Reflected XSS. This issue affects Pacsrapor: before 1.22...
Pacsrapor 跨站脚本漏洞
Pacsrapor is an application from Pacsrapor Inc. in the United States. A security vulnerability exists in Pacsrapor versions prior to 1.22, which arises from incorrect neutralization of input present during web page generation...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Izmir Katip Celebi University UBYS allows Stored XSS.This issue affects UBYS: before 23.03.16...
UBYS 跨站脚本漏洞
UBYS is a website. A security vulnerability exists in Izmir Katip Celebi University UBYS version prior to 23.03.16, which stems from improper input neutralization and a stored cross-site scripting vulnerability...
CVE-2022-34148 WordPress Backup Guard Plugin <= 1.6.9.0 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin = 1.6.9.0 versions...
CVE-2022-34148
CVE-2022-34148 affects JetBackup – WP Backup, Migrate & Restore plugin versions
CVE-2023-0322
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Talent Software UNIS allows Reflected XSS.This issue affects UNIS: before 28376...
CVE-2022-23790
CVE-2022-23790: The Firmanet Software and Technology Customer Relation Manager has an XSS flaw caused by improper neutralization of input during web page generation. Affects versions prior to 2022.03.13. PT-Security documents indicate a remediation path: update to a patch released after 2022.03.1...
CVE-2021-4195 XSS in Firmanet Software and Technology Customer Relation Manager
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firmanet Software and Technology Customer Relation Manager allows XSS Targeting HTML Attributes. This issue affects Customer Relation Manager: before 2022.03.13...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin = 1.1 versions...
CVE-2022-47171 WordPress IP Vault – WP Firewall Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin = 1.1 versions...
Firmanet Business Management System 跨站脚本漏洞
Firmanet Business Management System is a business management system from Firmanet Corporation. A security vulnerability exists in Firmanet Business Management System, which arises from improper neutralization of input during web page generation, allowing XSS Targeting of HTML attributes...
Firmanet Business Management System 跨站脚本漏洞
Firmanet Business Management System is a business management system from Firmanet Corporation. A security vulnerability exists in Firmanet Business Management System, which arises from improper neutralization of input during web page generation, allowing XSS Targeting of HTML attributes...
XSS @ group
Description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Proof of Concept Code: if $groupAction == 'addsave' && $user-perm-hasPermission$user-getUserId, 'addgroup' $user =...
Fortinet FortiNAC 跨站脚本漏洞
Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is primarily used for network access control and IoT security. A security vulnerability exists in Fortinet FortiNAC that stems from incorrectly neutralizing input during web page...
FortiNAC - Multiple Reflected XSS
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiNAC may allow an authenticated user to perform an XSS attack via crafted HTTP requests...
CVE-2022-2178
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saysis Computer Starcities allows Cross-Site Scripting XSS. This issue affects Starcities: before 1.1...
CVE-2022-2178
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saysis Computer Starcities allows Cross-Site Scripting XSS. This issue affects Starcities: before 1.1...
CVE-2022-2178
CVE-2022-2178 corresponds to a cross-site scripting (XSS) flaw in Saysis Computer Starcities prior to version 1.1, arising from improper neutralization of input during web page generation. The vulnerability could allow injection of malicious scripts when rendering pages. Affected product/version:...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS.This issue affects SOBIAD: before 23.02.01...