CVE-2020-19617: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...

PT-2021-10375

Name of the Vulnerable Software and Affected Versions: mblog version 3.5 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It can be exploited via the nickname field to the "/settings/profile" API endpoint. Recommendations: For mblog version 3.5, update the software t...

langhsu mblog 跨站脚本漏洞

Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5 has a cross-site scripting vulnerability that can be exploited to inject arbitrary Web script or HTML via the nickname field in /settings/profile...

Monica Cross-Site Scripting Vulnerability

Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Nickname field...

CVE-2021-27559

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

CVE-2021-27559

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

Design/Logic Flaw

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

CVE-2021-27559

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

CVE-2021-27559

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

CVE-2021-27559

Monica 2.19.1 is affected by a stored XSS on the Contacts page via the Nickname field. The vulnerability is triggered when untrusted input is stored and later rendered in the page, potentially allowing script execution in the victim’s browser. The connected documents confirm the existence of this...

CVE-2021-27559

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

Monica 跨站脚本漏洞

Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Nickname field...

PT-2021-17509

Name of the Vulnerable Software and Affected Versions Monica version 2.19.1 Description The issue concerns a stored XSS vulnerability in the Contact page, specifically via the Nickname field. This allows for malicious scripts to be stored and executed when the page is accessed. Recommendations Fo...

CVE-2021-27559: Improper Neutralization of Input During Web Page Generation

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

Red Discord Bot Cross-Site Scripting Vulnerability

Red Discord Bot is a modular robot written in Python by an individual developer. The bot software can be configured to perform different functions depending on the module. A security vulnerability exists in Red Discord Bot Dashboard that allows a mismatched user to inject code into the webserver...

BaserCMS Cross-Site Scripting Vulnerability (CNVD-2020-60477)

BaserCMS is an open source enterprise-level content management system cms. A cross-site scripting vulnerability exists in versions of baserCMS prior to 4.4.1. An attacker can exploit this vulnerability by entering a specially crafted nickname in a blog comment to execute arbitrary JavaScript...

CVE-2020-5302

MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...

Design/Logic Flaw

MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...

CVE-2020-5302

MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...

PT-2020-18391

Name of the Vulnerable Software and Affected Versions MH-WikiBot affected versions not specified Description The issue allowed unprivileged users to access steward commands on the IRC interface by impersonating the nickname of a privileged user, as no login check was performed. Recommendations At...