CVE-2022-23656

Zulip is an open source team chat app. The main development branch of Zulip Server from June 2021 and later is vulnerable to a cross-site scripting vulnerability on the recent topics page. An attacker could maliciously craft a full name for their account and send messages to a topic with several...

EUVD-2022-28595

Malicious code in bioql PyPI...

CVE-2022-23656

Zulip is an open source team chat app. The main development branch of Zulip Server from June 2021 and later is vulnerable to a cross-site scripting vulnerability on the recent topics page. An attacker could maliciously craft a full name for their account and send messages to a topic with several...

Cross site scripting

Zulip is an open source team chat app. The main development branch of Zulip Server from June 2021 and later is vulnerable to a cross-site scripting vulnerability on the recent topics page. An attacker could maliciously craft a full name for their account and send messages to a topic with several...

CVE-2022-23656

Zulip is an open source team chat app. The "main" development branch of Zulip Server from June 2021 and later is vulnerable to a cross-site scripting vulnerability on the recent topics page. An attacker could maliciously craft a full name for their account and send messages to a topic with severa...

CVE-2022-23656 Cross-site scripting vulnerability in Zulip Server

Zulip is an open source team chat app. The main development branch of Zulip Server from June 2021 and later is vulnerable to a cross-site scripting vulnerability on the recent topics page. An attacker could maliciously craft a full name for their account and send messages to a topic with several...

CVE-2022-23656 Cross-site scripting vulnerability in Zulip Server

Zulip is an open source team chat app. The main development branch of Zulip Server from June 2021 and later is vulnerable to a cross-site scripting vulnerability on the recent topics page. An attacker could maliciously craft a full name for their account and send messages to a topic with several...

PT-2022-16165

Name of the Vulnerable Software and Affected Versions Zulip Server versions from June 2021 through main branch before 2022-03-01 Description The issue affects the recent topics page of Zulip Server, where an attacker could exploit a cross-site scripting vulnerability by crafting a malicious full...

CVE-2022-23656: Improper Neutralization of Input During Web Page Generation

Zulip is an open source team chat app. The main development branch of Zulip Server from June 2021 and later is vulnerable to a cross-site scripting vulnerability on the recent topics page. An attacker could maliciously craft a full name for their account and send messages to a topic with several...

MyBB 1.6.2 Stored XSS Vulnerability

Exploit for php platform in category web applications MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XS...

MyBB 1.6.2 Cross Site Scripting

MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XSS code as the title any user with any level of...