Lucene search
+L

4 matches found

Cvelist
Cvelist
added 2026/05/17 12:11 p.m.42 views

CVE-2018-25330 Joomla! EkRishta 2.10 Persistent XSS and SQL Injection

Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that allow attackers to inject malicious code through profile fields and POST parameters. Attackers can inject script payloads in profile information fields like Address that execute when...

8.8CVSS0.00317EPSS
SaveExploits0References4
OSV
OSV
added 2021/01/29 6:15 a.m.7 views

CVE-2021-3298

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...

5.4CVSS6.1AI score0.02144EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2021/01/29 6:15 a.m.6 views

CVE-2021-3298

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...

5.4CVSS6AI score0.02144EPSS
SaveExploits2References3
OSV
OSV
added 2021/01/29 6:15 a.m.6 views

UBUNTU-CVE-2021-3298

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...

5.4CVSS5.8AI score0.02144EPSS
SaveExploits2References4
Rows per page
Query Builder