8 matches found
EUVD-2021-27685
Malicious code in bioql PyPI...
CVE-2021-40509
ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...
CVE-2021-40509
ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...
Design/Logic Flaw
ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...
CVE-2021-40509
CVE-2021-40509 affects JForum2 2.7.0. A cross-site scripting (XSS) vulnerability exists in ViewCommon.java where user input (signature) is not properly handled, allowing injection of malicious scripts. Documents confirm the vulnerable component and file, the root cause is inadequate input sanitiz...
CVE-2021-40509
ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...
PT-2021-22912
Name of the Vulnerable Software and Affected Versions JForum2 version 2.7.0 Description The issue allows for XSS via a user signature, specifically in the ViewCommon.java file. Recommendations For JForum2 version 2.7.0, update the ViewCommon.java file to properly sanitize user input in signatures...