EUVD-2022-31646

Malicious code in bioql PyPI...

CVE-2022-27107

OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideolinkAddress" parameter...

Design/Logic Flaw

OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideolinkAddress" parameter...

CVE-2022-27107

OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideolinkAddress" parameter...

CVE-2022-27107

OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideolinkAddress" parameter...

CVE-2022-27107

OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideolinkAddress" parameter...

PT-2022-18224

Name of the Vulnerable Software and Affected Versions OrangeHRM version 4.10 Description The issue concerns a Stored XSS vulnerability in the "Share Video" section under "OrangeBuzz". This vulnerability can be exploited via the createVideolinkAddress parameter using GET or POST requests...

CVE-2022-27107: Improper Neutralization of Input During Web Page Generation

OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideolinkAddress" parameter...

PT-2018-13757

Name of the Vulnerable Software and Affected Versions b3log Solo version 2.9.3 Description The issue allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator, exploiting an XSS vulnerability in the Input page under the Publish Articles...

CVE-2018-16805: Improper Neutralization of Input During Web Page Generation

In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator...