CVE-2023-38759

CVE-2023-38759 describes a Cross-Site Request Forgery (CSRF) vulnerability in the wger Project, Workout Manager version 2.2.0a3. The issue enables a remote attacker to gain privileges via the user-management features, affecting multiple components/files (e.g., gym.py, reset_user_password.html, ov...

Cross site scripting

Cross-site scripting XSS vulnerability in the Site Editor aka SiteBuilder feature in Parallels Plesk Panel 10.4.4build20111103.18 allows remote attackers to inject arbitrary web script or HTML via the login parameter to preferences.html...

CVE-2011-4777: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Site Editor aka SiteBuilder feature in Parallels Plesk Panel 10.4.4build20111103.18 allows remote attackers to inject arbitrary web script or HTML via the login parameter to preferences.html...

PT-2011-5100

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.4.4 build20111103.18 Description A cross-site scripting XSS issue exists in the Site Editor feature, allowing remote attackers to inject arbitrary web script or HTML via the login parameter to "preferences.html...