2531 matches found
PT-2020-14486
Name of the Vulnerable Software and Affected Versions bestsoftinc Hotel Booking System Pro plugin versions 1.1 and earlier Description An issue in the plugin allows persistent XSS to occur via any of the registration fields. Recommendations For bestsoftinc Hotel Booking System Pro plugin versions...
PT-2020-14485
Name of the Vulnerable Software and Affected Versions bestsoftinc Car Rental System plugin versions through 1.3 for WordPress Description An issue in the bestsoftinc Car Rental System plugin allows persistent XSS to occur via any of the registration fields. Recommendations For bestsoftinc Car...
CVE-2020-15536: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields...
CVE-2020-15535: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields...
CVE-2020-13427
Victor CMS 1.0 has Persistent XSS in admin/users.php?source=adduser via the username, userfirstname, or userlastname parameter...
CVE-2020-13427
Victor CMS 1.0 has Persistent XSS in admin/users.php?source=adduser via the username, userfirstname, or userlastname parameter...
CVE-2020-13427
Victor CMS 1.0 has Persistent XSS in admin/users.php?source=adduser via the username, userfirstname, or userlastname parameter...
CVE-2020-13427
CVE-2020-13427 affects Victor CMS 1.0. The vulnerability is a persistent cross-site scripting (XSS) flaw exploitable via the admin/users.php?source=add_user parameters (user_name, user_firstname, user_lastname). The available connected documents confirm the existence and location of the XSS, but ...
CVE-2020-13427
Victor CMS 1.0 has Persistent XSS in admin/users.php?source=adduser via the username, userfirstname, or userlastname parameter...
PT-2020-13534
Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to Persistent XSS in the "admin/users.php?source=add user" endpoint via the user name, user firstname, or user lastname parameters. Recommendations For Victor CMS version 1.0, as a...
CVE-2020-13427: Improper Neutralization of Input During Web Page Generation
Victor CMS 1.0 has Persistent XSS in admin/users.php?source=adduser via the username, userfirstname, or userlastname parameter...
CVE-2020-13853
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
CVE-2020-13853
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
CVE-2020-13853
Pandora FMS 7.44 is affected by CVE-2020-13853, a persistent Cross-Site Scripting (XSS) vulnerability in the Messages feature. The CoreLabs advisory details that an attacker can inject arbitrary JavaScript into messages, which is executed in the recipient’s browser and can facilitate session cook...
PT-2020-13733
Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.44 Description The issue is related to a persistent XSS in the Messages feature. Recommendations For Artica Pandora FMS version 7.44, update to a version that fixes the persistent XSS issue in the Messages feature...
CVE-2020-13853: Improper Neutralization of Input During Web Page Generation
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting
Exploit Title: osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting Date: 2020-06-26 Exploit Author: Matthew Aberegg Vendor Homepage: https://osticket.com Patch Link: https://github.com/osTicket/osTicket/commit/d54cca0b265128f119b6c398575175cb10cf1754 Version: osTicket 1.14.1 Tested o...
CVE-2020-8789
Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...
