10582 matches found
Marketing Performance <= 2.0.0 - Reflected XSS
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
Xss in compose mail functionaility
Description Reflected cross-site scripting or XSS arises when an application receives data in an HTTP request and includes that data within the immediate response in an unsafe way. Proof of Concept - Step1: login as normal user. - step2: click on webmail and click on compose. - step3: now enter "...
PT-2023-1324 · Cisco · Cisco Prime Infrastructure
Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure Software affected versions not specified Description: The issue is related to insufficient protection of the web page structure in the Cisco Prime Infrastructure system, allowing an unauthenticated, remote attacker ...
CVE-2022-4306
The Panda Pods Repeater Field WordPress plugin before 1.5.4 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a user having at least Contributor permission...
CVE-2022-4306
The CVE-2022-4306 vulnerability affects the WordPress plugin Panda Pods Repeater Field (versions before 1.5.4). The issue is a reflected XSS caused by not sanitizing/escaping a parameter before echoing it on the page, exploitable by users with at least Contributor permission. The Nuclei template ...
CVE-2022-4306 Panda Pods Repeater Field < 1.5.4 - Reflected XSS
The Panda Pods Repeater Field WordPress plugin before 1.5.4 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a user having at least Contributor permission...
CVE-2022-44025
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 2 of 6...
CVE-2022-44026
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 3 of 6...
CVE-2022-44028
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 5 of 6...
CVE-2022-44024
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 1 of 6...
Cross site scripting
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 6 of 6...
Cross site scripting
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 3 of 6...
CVE-2022-44024
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 1 of 6...
CVE-2022-44029
NetScout nGeniusONE 6.3.2 before P10 is affected by CVE-2022-44029, a Reflected Cross-Site Scripting (XSS) vulnerability. The issue is described across multiple sources (NVD/Red Hat/CVE records) with a CVSS v3.1 base score of 6.1 (Medium). Concrete details such as the vulnerable component/file, e...
CVE-2022-44026
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 3 of 6...
CVE-2022-44025
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 2 of 6...
CVE-2022-48012
Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...
CVE-2022-44028
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 5 of 6...