CVE-2022-37139

Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability...

CVE-2022-37139: Improper Neutralization of Input During Web Page Generation

Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability...

CVE-2022-39207 Persistent XSS in OneDev

Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. During CI/CD builds, it is possible to save build artifacts for later retrieval. They can be accessed through OneDev's web UI after the successful run of a build. These artifact files are served by the webserver in the same...

CVE-2022-36254: Improper Neutralization of Input During Web Page Generation

Multiple persistent cross-site scripting XSS vulnerabilities in index.php in tramyardg Hotel Management System 1.0 allow remote attackers to inject arbitrary web script or HTML via multiple parameters such as "fullname"...

CVE-2022-37253: Improper Neutralization of Input During Web Page Generation

Persistent cross-site scripting XSS in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter...

CVE-2022-36637: Improper Neutralization of Input During Web Page Generation

Garage Management System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the brandname parameter at /brand.php...

CVE-2022-34658: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated contributor+ Persistent Cross-Site Scripting XSS vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-31148

Shopware is an open source e-commerce software. In versions from 5.7.0 a persistent cross site scripting XSS vulnerability exists in the customer module. Users are recommend to update to the current version 5.7.14. You can get the update to 5.7.14 regularly via the Auto-Updater or directly via th...

CVE-2022-31148: Improper Neutralization of Input During Web Page Generation

Shopware is an open source e-commerce software. In versions from 5.7.0 a persistent cross site scripting XSS vulnerability exists in the customer module. Users are recommend to update to the current version 5.7.14. You can get the update to 5.7.14 regularly via the Auto-Updater or directly via th...

CVE-2022-34853 WordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated contributor or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in wpWax Team plugin = 1.2.6 at WordPress...

PT-2022-22396

Name of the Vulnerable Software and Affected Versions wpWax Team plugin versions 1.2.6 and earlier Description The issue concerns multiple authenticated Persistent Cross-Site Scripting XSS vulnerabilities. These vulnerabilities require an attacker to have at least a contributor or higher user rol...

CVE-2022-34853: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated contributor or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in wpWax Team plugin = 1.2.6 at WordPress...

CVE-2022-32318: Improper Neutralization of Input During Web Page Generation

Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the component /ffos/classes/Master.php?f=savecategory...

PT-2022-21225

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue is related to a persistent cross-site scripting XSS vulnerability. This vulnerability is present in the /ffos/classes/Master.php?f=save category component. Recommendations For Fast Fo...

CVE-2014-3650: Improper Neutralization of Input During Web Page Generation

Multiple persistent cross-site scripting XSS flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input...

Stored Cross-Site Scripting (XSS)

Client-side scripts are used extensively by modern web applications. They perform from simple functions such as the formatting of text up to full manipulation of client-side data and Operating System interaction. Cross Site Scripting XSS allows clients to inject scripts into a request and have th...

PT-2022-7971

Name of the Vulnerable Software and Affected Versions Admin Custom Login Plugin version 2.4.5.2 Description A problematic issue has been identified, allowing for basic cross site scripting Persistent due to the manipulation of an unknown function. This can be exploited remotely. Recommendations F...

CVE-2017-20098: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting Persistent. It is possible to launch the attack remotely...

Cross site scripting

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

CVE-2020-27509: Improper Neutralization of Input During Web Page Generation

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...