CVE-2021-28418

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...

CVE-2021-28418

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...

Cross site scripting

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "fromtime" parameter...

Cross site scripting

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "searchname" parameter...

CVE-2021-28420

CVE-2021-28420 is a cross-site scripting (XSS) vulnerability affecting Seo Panel 4.8.0. The issue allows remote attackers to inject JavaScript through alerts.php via the from_time parameter. Several connected sources (Red Hat CVE entry, OSV, CNVD, CVE lists, Exploit-DB) confirm the same flaw and ...

CVE-2021-28418

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...

CVE-2021-28418

CVE-2021-28418 describes a cross-site scripting (XSS) vulnerability in Seo Panel 4.8.0 that allows a remote attacker to inject JavaScript via the settings.php and the category parameter. Multiple connected sources corroborate the issue (NVD/OSV/CNVD/CVELIST, Exploit-DB). Exploit-DB references a r...

CVE-2021-28417

CVE-2021-28417 describes a cross-site scripting (XSS) vulnerability in Seo Panel 4.8.0 . The issue allows remote attackers to inject JavaScript through the archive.php page via the search_name parameter (and related descriptions reference a reflected XSS in the SEO admin flow). The affected compo...

CVE-2021-28417

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "searchname" parameter...

CVE-2021-24135: Improper Neutralization of Input During Web Page Generation

Unvalidated input and lack of output encoding in the WP Customer Reviews WordPress plugin, versions before 3.4.3, lead to multiple Stored Cross-Site Scripting vulnerabilities allowing remote attackers to inject arbitrary JavaScript code or HTML...

SEO Panel Cross-Site Script Vulnerability

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the alerts.php fromtime parameter...

WordPress Constant Contact Forms Cross-Site Script Vulnerabilities

Wordpress Constant Contact Forms is Wordpress open source an application plugin. It allows websites to capture visitor information directly and easily. A cross-site scripting vulnerability exists in versions of the Constant Contact Forms WordPress plugin prior to 1.8.8. The vulnerability stems fr...

SEO Panel Cross-Site Script Vulnerability

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the settings.php category parameter...

Cross-Site Scripting (XSS)

pki-core is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the request search page...

Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element

In the plugin, the column element includes/elements/column.php accepts an ‘htmltag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘savebuilder’ request containing JavaScript in th...

The name of a filter can be used to XSS users who open an "Export HTML Report" - CVE-2021-26083

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in Export HTML Report feature. The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before...

Eclipse Theia Cross-Site Scripting Vulnerability

Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A cross-site scripting vulnerability exists in Eclipse Theia 1.8.0 and prior versions, which stems from the absence of HTML escaping...

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

PT-2021-17783

Name of the Vulnerable Software and Affected Versions: Eclipse Theia versions up to and including 1.8.0 Description: The issue concerns the lack of HTML escaping in the debug console, allowing arbitrary Javascript code to be injected. Recommendations: For Eclipse Theia versions up to and includin...