EUVD-2022-43608

Malicious code in bioql PyPI...

CVE-2022-40317

OpenKM 6.3.11 allows stored XSS related to the javascript substring in an A element...

CVE-2022-40317

OpenKM 6.3.11 allows stored XSS related to the javascript substring in an A element...

CVE-2022-40317

OpenKM 6.3.11 allows stored XSS related to the javascript substring in an A element...

CVE-2022-40317

OpenKM 6.3.11 allows stored XSS related to the javascript substring in an A element...

PT-2022-25345 · Openkm · Openkm

Name of the Vulnerable Software and Affected Versions: OpenKM version 6.3.11 Description: The issue allows stored XSS related to the javascript: substring in an A element. This could potentially lead to malicious script execution when a user interacts with the affected element. Recommendations: F...

CVE-2019-20041

wpksesbadprotocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript substring...

CVE-2019-20041

wpksesbadprotocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript: substring...