GHSA-CC94-3V9C-7RM8 Apache ActiveMQ webconsole admin GUI is open to XSS

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue...

Cross-Site Scripting (XSS)

activemq-web-console is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the listing of queue contents in the admin GUI...

CVE-2019-14406

cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...

Cross site scripting

cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...

CVE-2019-14406

CVE-2019-14406 affects cPanel before 78.0.18, with a stored XSS in the BoxTrapper Queue Listing (SEC-493). Root cause: lack of proper validation of client-side data by the web application. Impact is consistent with stored XSS in the affected component; exploitation details are not provided in the...