Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 3:16 a.m.•20 views

CVE-2023-27149

A stored cross-site scripting XSS vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list...

4.8CVSS5.6AI score0.00354EPSS
SaveExploits1References1
Snyk
Snyk
•added 2025/03/31 2:45 a.m.•23 views

Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the manipulation of the Label argument. An attacker can inject malicious scripts by crafting a specially formatted input that exploits the improper...

5.1CVSS5.3AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2023/10/23 8:15 p.m.•6 views

CVE-2023-27149

A stored cross-site scripting XSS vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list...

4.8CVSS6AI score0.00354EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/10/23 12:00 a.m.•18 views

Enhancesoft osTicket Cross-Site Scripting Vulnerability

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, USA. A security vulnerability exists in Enhancesoft osTicket v1.17.2. An attacker can exploit this vulnerability to execute arbitrary web script or HTML via a specially crafted payload injected into the Label input paramete...

4.8CVSS6.7AI score0.00354EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/23 12:00 a.m.•6 views

CVE-2023-27149: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list...

4.8CVSS5.9AI score0.00354EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/05/25 7:15 p.m.•11 views

CVE-2021-25934

In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.4CVSS5.8AI score0.01008EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/05/25 12:00 a.m.•14 views

Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the U.S.-based OpenNMS Group Opennms Group. A cross-site scripting vulnerability exists in OpenNMS Horizon and OpenNMS Meridian, which stems from the fact that the function...

5.4CVSS5.6AI score0.01008EPSS
SaveExploits1References3
Rows per page
Query Builder