8 matches found
EUVD-2022-4704
Malicious code in bioql PyPI...
oauth2orize-fprm XSS vulnerability
index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL...
oauth2orize-fprm cross-site scripting vulnerability
oauth2orize-fprm is a Post Response mode support component for OAth2orize. A cross-site scripting vulnerability exists in the index.js file in versions of oauth2orize-fprm prior to 0.2.1, which stems from the program failing to properly encode input values. A remote attacker can exploit this...
Cross-site Scripting (XSS)
oauth2orize-fprm is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of encoding of values in parameters, allowing arbitrary html code to be executed when rendered...
CVE-2018-11647
index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL...
CVE-2018-11647
index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL...
CVE-2018-11647
The CVE pertains to oauth2orize-fprm, a Post Response mode component for OAuth2orize. A cross-site scripting (XSS) flaw exists in index.js before version 0.2.1, caused by insufficient encoding of input values, enabling XSS via a crafted URL. No explicit exploitation details are provided in the su...
CVE-2018-11647
index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL...