Lucene search
K

9 matches found

Nuclei
Nuclei
added 16 hours ago19 views

JustWriting - Cross-Site Scripting

A cross-site scripting vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter. id: CVE-2021-41467 info: name: JustWriting - Cross-Site Scripting author: madrobot severity: medium...

6.1CVSS6.3AI score0.07609EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 11:36 a.m.1 views

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS6AI score0.07609EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2021/10/04 8:13 p.m.44 views

Cross-site scripting in application/controllers/dropbox.php in JustWriting

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS4.1AI score0.07609EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/10/04 8:13 p.m.11 views

GHSA-GXMC-5WJ3-JX64 Cross-site scripting in application/controllers/dropbox.php in JustWriting

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS6AI score0.07609EPSS
Exploits0References3
NVD
NVD
added 2021/10/01 4:15 p.m.9 views

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS0.07609EPSS
Exploits0References2
Prion
Prion
added 2021/10/01 4:15 p.m.6 views

Cross site scripting

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

4.3CVSS6AI score0.07609EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/10/01 3:42 p.m.13 views

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.2AI score0.07609EPSS
Exploits0References2
CVE
CVE
added 2021/10/01 3:42 p.m.78 views

CVE-2021-41467

CVE-2021-41467 affects JustWriting 1.0.0 and earlier. A vulnerability in file application/controllers/dropbox.php allows remote attackers to inject arbitrary web script or HTML via the challenge parameter (XSS). Exploitation status not detailed in the provided docs beyond the description; remedia...

6.1CVSS6AI score0.07609EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/10/01 12:0 a.m.0 views

JustWriting 跨站脚本漏洞

JustWriting is a simple blogging platform. A cross-site scripting vulnerability exists in JustWriting versions 1.0.0 and below, which allows remote attackers to inject arbitrary web script or HTML via the challange parameter...

6.1CVSS6.1AI score0.07609EPSS
Exploits0References3
Rows per page
Query Builder