Cross site scripting

An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals in online documentation generated using Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific...

CVE-2021-46827

CVE-2021-46827 affects Oxygen XML WebHelp prior to 22.1 build 2021082006 and 23.x prior to 23.1 build 2021090310. The issue is an XSS in the search terms proposals feature of online documentation generated by WebHelp, enabling JavaScript execution when a user types crafted text into the WebHelp o...

Syncro Soft Oxygen XML WebHelp 跨站脚本漏洞

Syncro Soft Oxygen XML WebHelp is used by Syncro Soft Romania to convert DITA and DocBook resources to WebHelp output. A security vulnerability exists in Syncro Soft Oxygen XML WebHelp versions prior to 22.1 build 2021082006, 23.x prior to 23.1 build 2021090310, which stems from an XSS...

Syncro Soft Oxygen XML Editor Arbitrary File Read Vulnerability

Syncro Soft Oxygen XML Editor is an XML editor from Syncro Soft Romania. A security vulnerability exists in Oxygen XML Editor version 21.1.1. An attacker can exploit the vulnerability to read arbitrary files...

CVE-2019-20191

Oxygen XML Editor 21.1.1 allows XXE to read any file...

CVE-2019-20191

Oxygen XML Editor 21.1.1 allows XXE to read any file...

Design/Logic Flaw

Oxygen XML Editor 21.1.1 allows XXE to read any file...

CVE-2019-20191

Oxygen XML Editor 21.1.1 allows XXE to read any file...

CVE-2019-20191

Oxygen XML Editor 21.1.1 is affected by an XML External Entity (XXE) vulnerability that can be leveraged to read arbitrary files. The CVE entry CVE-2019-20191 is corroborated by multiple sources (NVD, CNVD, CVE list), describing an XXE issue with partial confidentiality impact. No remediation det...

oXygen XML Editor 21.1.1 - XML External Entity Injection

Exploit Title: oXygen XML Editor 21.1.1 - XML External Entity Injection Author: Pablo Santiago Date: 2019-11-13 Vendor Homepage: https://www.oxygenxml.com/ Source:https://www.oxygenxml.com/xmleditor/downloadoxygenxmleditor.html Version: 21.1.1 CVE : N/A Tested on: Windows 7 PoC 1- python -m...

oXygen XML Editor 21.1.1 XML Injection

Exploit Title: oXygen XML Editor 21.1.1 - XML External Entity Injection Author: Pablo Santiago Date: 2019-11-13 Vendor Homepage: https://www.oxygenxml.com/ Source:https://www.oxygenxml.com/xmleditor/downloadoxygenxmleditor.html Version: 21.1.1 CVE : N/A Tested on: Windows 7 PoC 1- python -m...

oXygen XML Editor 21.1.1 - XML External Entity Injection

oXygen XML Editor 21.1.1 - XML External Entity Injection Exploit Title: oXygen XML Editor 21.1.1 - XML External Entity Injection Author: Pablo Santiago Date: 2019-11-13 Vendor Homepage: https://www.oxygenxml.com/ Source:https://www.oxygenxml.com/xmleditor/downloadoxygenxmleditor.html Version:...