Cross Site Scripting (XSS)

concrete5/concrete5 is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient input validation in the Name input field within the file instances.php, allowing a rogue administrator to inject malicious JavaScript code...

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross Site Scripting. The vulnerability is due to a lack of url sanitization in instances.php which allow an attacker to pass a malicious URL...

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in instances.php due to missing sanitization to escape newly added values which allows an attacker to inject and execute JavaScript...