Sourcecodester Online Food Menu Security Vulnerability

Online Food Menu is an online food menu for rems individual developers. A security vulnerability exists in Sourcecodester Online Food Menu version 1.0, which results from a cross-site scripting XSS attack on the Menu Name and Description fields in the Update Menu section...

DBHcms Cross-Site Scripting Vulnerability (CNVD-2020-49087)

DBHcms is a small, free and open source content management system for personal and small business websites. A stored cross-site scripting vulnerability exists in DBHcms 1.2.0. The vulnerability stems from the failure of the htmlspecialchars function for the 'menudescription' variable in...

CVE-2020-19882

DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menudescription' variable in dbhcms\mod\mod.menus.edit.php line 83 and in dbhcms\mod\mod.menus.view.php line 111, A remote authenticated with admin user can exploit this vulnerability to hijack other users...

CVE-2020-19882

DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menudescription' variable in dbhcms\mod\mod.menus.edit.php line 83 and in dbhcms\mod\mod.menus.view.php line 111, A remote authenticated with admin user can exploit this vulnerability to hijack other users...

PT-2020-15208

Name of the Vulnerable Software and Affected Versions DBHcms version 1.2.0 Description The issue is related to a stored XSS vulnerability. This occurs because there is no htmlspecialchars function applied to the menu description variable in specific files, namely dbhcmsmodmod.menus.edit.php at li...

CVE-2009-4370

Cross-site scripting XSS vulnerability in the Menu module modules/menu/menu.admin.inc in Drupal Core 6.x before 6.15 allows remote authenticated users with permissions to create new menus to inject arbitrary web script or HTML via a menu description, which is not properly handled in the menu...