CVE-2021-3812

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3811

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Pi-Hole Adminlte 跨站脚本漏洞

Pi-Hole Adminlte is a Pi-Hole control panel. It is used for statistical More... Pi-Hole adminlte suffers from a cross-site scripting vulnerability that stems from the vulnerability to incorrect neutralization of input during web page generation "cross-site scripting"...

CVE-2021-3780

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3783

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3785

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3780

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3783

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3646

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

btcpay server 跨站脚本漏洞

btcpay server is a free and open source bitcoin payment processor that allows you to accept bitcoins without fees or intermediaries. The btcpay server suffers from a cross-site scripting vulnerability that arises from the vulnerability to incorrect neutralization of input during web page generati...

CVE-2021-3767

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3768

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Improper Neutralization of Text-Values in Object Version Preview

Text-values were not properly escaped before printed in the version preview. This allowed XSS by authenticated users with access to the resources...

Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore

Impact Data Object CSV import allows formular injection. Patches Problem is patched in 10.1.1 Workarounds Apply https://github.com/pimcore/pimcore/pull/9992.patch References https://cwe.mitre.org/data/definitions/1236.html...

CVE-2021-21595

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS command. This vulnerability could allow the compadmin user to elevate privileges. This only impacts Smartlock WORM compliance mode clusters as a critical vulnerability and Dell...

The vulnerability of the printing control software in PaperCut MF and PaperCut NG, which exists due to the lack of measures to neutralize special elements, allows a violator to implement a script through the user interface.

The vulnerability of the printing control software in PaperCut MF and PaperCut NG exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to implement a malicious script through the user interface...

Abb Base Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

CVE-2021-32597

Multiple improper neutralization of input during web page generation CWE-79 in FortiManager and FortiAnalyzer versions 7.0.0, 6.4.5 and below, 6.2.7 and below user interface, may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack XSS by injecting malicious paylo...

CVE-2021-32597

CVE-2021-32597 concerns a cross-site scripting (XSS) vulnerability in Fortinet’s FortiManager and FortiAnalyzer. The connected sources identify a vulnerability in the user interface that can allow a remote authenticated attacker to perform a Stored XSS by injecting a malicious payload into GET pa...

CVE-2021-32598

An improper neutralization of CRLF sequences in HTTP headers 'HTTP Response Splitting' vulnerability In FortiManager and FortiAnalyzer GUI 7.0.0, 6.4.6 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow an authenticated and remote attacker to perform an HTTP request splittin...