6420 matches found
CVE-2023-41728
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5...
The vulnerability of TP-Link Deco M4 Mesh-system’s microprogramming software lies in the lack of measures to neutralize specific elements, allowing attackers to execute arbitrary commands.
The vulnerability of Mesh-system TP-Link Deco M4’s microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yordam MedasPro allows Reflected XSS.This issue affects MedasPro: before 28...
CVE-2023-29183
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14 GUI may allow an authenticated...
Cross site scripting
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14 GUI may allow an authenticated...
Stored XSS in guest management page
...
CVE-2023-37221
7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2023-37221
CVE-2023-37221 affects 7Twenty BOT and describes a Cross-site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The issue is documented across multiple sources (NVD, EUVD/ENISA, CVE lists, etc.), with the root cause stated as failure to properly ...
7Twenty BOT Cross-Site Scripting Vulnerability
7Twenty BOT is an artificial intelligence-based digital system from 7Twenty. 7Twenty BOT suffers from a cross-site scripting vulnerability that stems from incorrect neutralization of input during web page generation...
CVE-2023-39971
CVE-2023-39971 is an XSS vulnerability in the AcyMailing Enterprise component for Joomla, caused by improper neutralization of input during web page generation. Affected versions are 6.7.0 through 8.6.3. Connected sources consistently describe the issue as cross-site scripting due to input handli...
CVE-2023-39971 Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3
Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...
AcyMailing Joomla Component 跨站脚本漏洞
AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from improper input neutralization and allows cross-site scripting XSS...
PT-2023-27183 · Joomla · Acymailing Enterprise
Name of the Vulnerable Software and Affected Versions: AcyMailing Enterprise component for Joomla versions 6.7.0 through 8.6.3 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. This enables potential attackers to...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Stored XSS.This issue affects E-Commerce Software: before 11...
a2 License Portal System SQL Injection Vulnerability
a2 License Portal System is a license portal system from a2 License Portal System, Inc. A SQL injection vulnerability exists in a2 License Portal System versions prior to 1.48, which arises from incorrect neutralization of special elements used in SQL commands...
CVE-2023-36881: Improper Neutralization of Input During Web Page Generation
Azure Apache Ambari Spoofing Vulnerability...
CVE-2023-36869: Improper Neutralization of Input During Web Page Generation
Azure DevOps Server Spoofing Vulnerability...