7 matches found
EUVD-2020-23364
Malware in sbrugna...
5.4CVSS5.6AI score0.00602EPSS
SaveExploits1References3
CVE-2020-35706
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...
5.4CVSS5.6AI score0.00602EPSS
SaveExploits1
CVE-2021-21442: Improper Neutralization of Input During Web Page Generation
In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19...
5.4CVSS5.8AI score0.00603EPSS
SaveExploits0References3
CVE-2020-35706
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...
5.4CVSS5.5AI score
SaveExploits0References2
Cross site scripting
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...
3.5CVSS5.1AI score0.00602EPSS
SaveExploits1References2Affected Software1
20