27 matches found
PT-2026-103732
The bbp style pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display name via /wp-admin/profile.php + bbp reply content via bbPress reply form' parameter in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping. This...
CVE-2022-42100
KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form...
CVE-2023-28475
Concrete CMS previously concrete5 versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
Cross-Site Scripting (XSS)
concrete5/concrete5 is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in the reply form due to the lack of sanitization in msgID, which allows an attacker to inject and execute arbitrary JavaScript into the browser...
GHSA-VCPR-HM2M-GJJJ Reflected cross site scripting
Concrete CMS previously concrete5 before 9.2 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
Reflected cross site scripting
Concrete CMS previously concrete5 before 9.2 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
CVE-2023-28475
Concrete CMS previously concrete5 versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
Cross site scripting
Concrete CMS previously concrete5 versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
CVE-2023-28475
Concrete CMS previously concrete5 versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
PT-2023-21745 · Unknown · Concrete Cms
Name of the Vulnerable Software and Affected Versions: Concrete CMS previously concrete5 versions 8.5.12 and below Concrete CMS previously concrete5 versions 9.0 through 9.1.3 Description: The issue is related to Reflected XSS on the Reply form because the msgID was not sanitized. This allows for...
CVE-2023-28475
Concrete CMS (formerly concrete5) is affected by a Reflected XSS in the Reply form due to msgID not being sanitized. Affected versions: 8.5.12 and earlier, and 9.0–9.1.3. Impact per sources: potential to inject/execute arbitrary script in the browser. Remediation: upgrade to 9.2+ (patch versions ...
CVE-2023-28475: Improper Neutralization of Input During Web Page Generation
Concrete CMS previously concrete5 versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
CVE-2023-28475
Concrete CMS previously concrete5 versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
Cross site scripting
KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form...
CVE-2022-42100: Improper Neutralization of Input During Web Page Generation
KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form...
CVE-2022-42100
KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form...
KLiK SocialMediaWebsite 跨站脚本漏洞
KLiK SocialMediaWebsite is a simple PHP based social media website by Muhammad Saad personal developer. A cross-site scripting vulnerability exists in KLiK SocialMediaWebsite version 1.0.1 at reply-form. The vulnerability stems from a lack of effective filtering and escaping of user-supplied data...
PT-2022-26252 · Unknown · Klik Socialmediawebsite
Name of the Vulnerable Software and Affected Versions: KLiK SocialMediaWebsite version 1.0.1 Description: The issue allows attackers to store XSS via location input in the reply-form, potentially affecting user security. Recommendations: For KLiK SocialMediaWebsite version 1.0.1, consider disabli...
CVE-2022-42100
CVE-2022-42100 affects KLiK SocialMediaWebsite version 1.0.1. The RedHat/EUVD/CNVD/etc. entries confirm a cross-site scripting (XSS) vulnerability in the reply-form where user-supplied data in the location input can be stored and rendered, due to insufficient input filtering/escaping. The issue i...
