CVE-2021-31792

XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field...

CVE-2021-31792

XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field...

Cross site scripting

XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field...

CVE-2021-31792

CVE-2021-31792 affects SuiteCRM versions prior to 7.11.19. The vulnerability is a cross-site scripting flaw in the client account page that allows an attacker to inject JavaScript via the name field. No exploit specifics are provided beyond this description in the sources. Remediation per PT-Secu...

PT-2021-19509 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.11.19 Description: The issue allows an attacker to inject JavaScript via the name field in the client account page, potentially leading to code execution. Recommendations: For versions prior to 7.11.19, update to...

CVE-2021-31792: Improper Neutralization of Input During Web Page Generation

XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field...

SuiteCRM cross-site scripting vulnerability

SuiteCRM is a free open source customer relationship management application. A cross-site scripting vulnerability exists in the customer account page of SuiteCRM versions prior to 7.11.19. An attacker can exploit the vulnerability to inject JavaScript via the name field...

CVE-2021-22331

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

CVE-2021-22331

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

CVE-2021-22331

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

Design/Logic Flaw

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

CVE-2021-22331

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

CVE-2021-22331

CVE-2021-22331 describes a JavaScript injection vulnerability in Huawei smartphones (notably P30) where a module does not adequately verify certain inputs. Affected P30 versions include 10.1.0.165 and earlier, and 11.x builds such as 11.0.0.118, 11.0.0.120, and 11.0.0.138 across multiple build id...

PT-2021-14965

Name of the Vulnerable Software and Affected Versions: HUAWEI P30 versions earlier than 10.1.0.165C01E165R2P11 HUAWEI P30 versions earlier than 11.0.0.118C635E2R1P3 HUAWEI P30 versions earlier than 11.0.0.120C00E120R2P5 HUAWEI P30 versions earlier than 11.0.0.138C10E4R5P3 HUAWEI P30 versions...

CVE-2021-22331: Improper Neutralization of Special Elements in Output Used by a Downstream Component

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

Several Huawei products have been found to have vulnerabilities.

Huawei P30 is a smartphone from Huawei China.The Huawei P30 is vulnerable to JavaScript injection, which can be exploited by attackers to launch JavaScript injection by sending malicious application requests...

Sourcecodester Equipment Inventory System Cross-site Scripting Vulnerabilities

Sourcecodester Equipment Inventory System is a Sourcecodester open source application. It is used to organize and track its equipment. Sourcecodester Equipment Inventory System 1.0 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject arbitrary javascrip...

PT-2021-14033

Name of the Vulnerable Software and Affected Versions: IBM Content Navigator version 3.0.CD Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

Unspecified Vulnerability in Vaadin vaadin-server

Vaadin-server is a Vaadin open source application . A platform for rapid development of Web applications on the Java backend . A security vulnerability exists in vaadin-server versions 7.4.0 through 7.7.19, which can be exploited by an attacker to inject malicious JavaScript via an unspecified...

MintHCM Cross-Site Scripting Vulnerability

MINTHCM is a human resources management software developed by MINTHCM MintHCM A cross-site scripting vulnerability exists in version 3.0.8. The vulnerability stems from the Import feature that allows an attacker to perform cross-site scripting XSS loads in file uploads, which can be exploited by ...