CVE-2024-31835

Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter...

WordPress plugin WP MultiTasking – WP Utilities 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-46333

An authenticated cross-site scripting XSS vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function...

CVE-2024-46333

CVE-2024-46333: An authenticated XSS in Piwigo v14.5.0 allows injection of arbitrary web scripts/HTML via the Album Name field in Add Album. Affected component is the Album management flow; underlying cause is not detailed in the provided documents. Practical impact is limited to script execution...

CVE-2024-46333

An authenticated cross-site scripting XSS vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function...

TP-LINK TL-WR841ND 安全漏洞

The TP-LINK TL-WR841ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-LINK TL-WR841ND 20240920 and earlier versions, which originates from the parameter ssid in the file /userRpm/popupSiteSurveyRpm.htm that can lead to a stack-based buffer overflow...

CVE-2024-46333

An authenticated cross-site scripting XSS vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function...

CVE-2024-45985

A Cross Site Scripting XSS vulnerability in updatecontact.php of Blood Bank and Donation Management System v1.0 allows an attacker to inject malicious scripts via the name parameter of the updatecontact.php...

Blood-Bank-&-Donation-Management-System 安全漏洞

Blood-Bank-&-Donation-Management-System is a blood bank and blood donation management system by Varun Sardana, an individual developer. A security vulnerability exists in Blood-Bank-&-Donation-Management-System version 1.0, which stems from a cross-site scripting XSS vulnerability in...

CVE-2023-51157

Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter...

CVE-2023-51157

CVE-2023-51157 affects ZKTeco WDMS v5.1.3 Pro. A Cross Site Scripting (XSS) flaw allows a remote attacker, via a crafted script in the Emp Name field, to execute arbitrary code and access sensitive data. CVSS v3.1 base metrics: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (Impact: Confidentiality, Integri...

SourceCodester Profile Registration without Reload Refresh 跨站脚本漏洞

SourceCodester Profile Registration without Reload Refresh is a SourceCodester open source application. A cross-site scripting vulnerability exists in SourceCodester Profile Registration without Reload Refresh version 1.0, which stems from the parameter fullname in the file add.php that can lead ...

PT-2024-32486 · Iredadmin · Iredadmin

Name of the Vulnerable Software and Affected Versions: iRedAdmin versions prior to 2.6 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This can be exploited via the order name parameter. The vulnerability allows an attacker to perform actions, view, or modify...

dingfanzu 跨站脚本漏洞

dingfanzu is a php-based food ordering website developed by gk2007, an individual developer. A cross-site scripting vulnerability exists in dingfanzu, which originates from the parameter address-name in the scripts/order.js file in the Order Checkout component and can lead to cross-site scripting...

CVE-2024-46382

A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderController.java...

CVE-2024-46559

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAUsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

i-doit 跨站脚本漏洞

i-doit is a configuration management database software from i-doit Inc. A cross-site scripting vulnerability exists in i-doit pro that stems from a lack of proper cleanup of the id, lang, mNavID, name, pID, treeNode, type, and view parameters...

SUSE CVE-2024-3415

A vulnerability was found in SourceCodester Human Resource Information System 1.0. It has been classified as problematic. Affected is an unknown function of the file SuperadminDashboard/process/addbranchesprocess.php. The manipulation of the argument branchesname leads to cross site scripting. It...

PHP CRUD 跨站脚本漏洞

PHP CRUD is a PHP-based implementation of add, delete, change and retrieve. A cross-site scripting vulnerability exists in PHP CRUD version 1.0, which stems from a cross-site scripting vulnerability contained in the firstname/middlename/lastname parameters of the /endpoint/update.php file...

PHP CRUD 跨站脚本漏洞

PHP CRUD is a PHP-based implementation of add, delete, change and retrieve. A cross-site scripting vulnerability exists in PHP CRUD version 1.0, which stems from a cross-site scripting vulnerability contained in the firstname/middlename/lastname parameters of the /endpoint/Add.php file...