7 matches found
GHSA-CC94-3V9C-7RM8 Apache ActiveMQ webconsole admin GUI is open to XSS
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue...
Cross-Site Scripting (XSS)
activemq-web-console is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the listing of queue contents in the admin GUI...
CVE-2019-14406
cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...
Cross site scripting
cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...
CVE-2019-14406
CVE-2019-14406 affects cPanel before 78.0.18, with a stored XSS in the BoxTrapper Queue Listing (SEC-493). Root cause: lack of proper validation of client-side data by the web application. Impact is consistent with stored XSS in the affected component; exploitation details are not provided in the...
PT-2019-13675
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 78.0.18 Description The issue concerns stored XSS in the BoxTrapper Queue Listing. Recommendations For versions prior to 78.0.18, update to version 78.0.18 or later to resolve the issue...
