Cross-site Scripting (XSS)

getkirby/cms is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the file function at Response.php due to the MIME auto-detection of uploaded files which allows an attacker to upload a file with an arbitrary MIME type and inject arbitrary scripts...

lcrcpa.com XSS vulnerability

Open Bug Bounty ID: OBB-639957 Description| Value ---|--- Affected Website:| lcrcpa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

XML External Entity (XXE) Processing

zendframework/zendRest and zendframework/zendservice-amazon are vulnerable to XML external entity XXE processing attacks. The attacks exist because they do not properly scan the validity of the XML result data string in the construct function of Result.php and the validity of the http response bo...