6042 matches found
CVE-2020-22224
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the pjActionPreview function...
Simplephpscripts Simple CMS 2.1 Cross Site Scripting
Document Title: =============== Simplephpscripts Simple CMS v2.1 - XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2301 Release Date: ============= 2021-10-18 Vulnerability Laboratory ID VL-ID: ====================================...
WordPress YOP Poll Plugin Cross-Site Scripting Vulnerability
WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress YOP Poll Plugin, which stems from a lack of...
October 21, 2021—KB5006746 (OS Build 22000.282) Preview
None None...
CVE-2020-8291
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks...
CVE-2020-8291
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks...
CVE-2020-8291
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks...
Cross site scripting
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks...
CVE-2020-8291
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks...
CVE-2020-8291: Improper Neutralization of Input During Web Page Generation
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks...
PT-2021-12720
Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 3.9 Description: A link preview rendering issue could lead to potential XSS attacks. Recommendations: For versions prior to 3.9, update to version 3.9 or later to resolve the issue...
Rocket.Chat cross-site scripting vulnerability
Rocket.Chat is an open source team chat software. A cross-site scripting vulnerability exists in versions prior to Rocket.Chat 3.9, which stems from an issue with the rendering of the application's link previews that could lead to potential XSS attacks...
WordPress cross-site scripting vulnerabilities
WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress YOP Poll Plugin, which stems from a lack of...
Simplephpscripts Simple CMS v2.1 - XSS Web Vulnerability
Document Title: =============== Simplephpscripts Simple CMS v2.1 - XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2301 Release Date: ============= 2021-10-17 Vulnerability Laboratory ID VL-ID: ====================================...
Shopify: After changing the storefront password, the preview link is still valid
Description: 1. The user needs to know the storefront password to generate the preview link. 2. After the administrator changes the storefront password, users can still access the storefront through the preview link. 3.reason: （1）User can generate preview link. （2）Simply changing the password wil...
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module
The plugin is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of...
Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name
Impact preview-docs command allows path traversal if current working dir contains files with question mark ? in name and attacker knows the name. Patches It was patched starting from 1.0.0-beta.59 Workarounds Do not run openapi-cli preview-docs command in the folder which contains files with...
GHSA-Q324-Q795-2Q5P Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name
Impact preview-docs command allows path traversal if current working dir contains files with question mark ? in name and attacker knows the name. Patches It was patched starting from 1.0.0-beta.59 Workarounds Do not run openapi-cli preview-docs command in the folder which contains files with...
PT-2021-24447
Name of the Vulnerable Software and Affected Versions: openapi-cli versions prior to 1.0.0-beta.59 Description: The issue allows path traversal when the preview-docs command is executed in a directory containing files with a question mark ? in their name, provided the attacker is aware of the fil...