5 matches found
CVE-2022-27258
Multiple Cross-Site Scripting XSS vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter...
CVE-2022-27258
Multiple Cross-Site Scripting XSS vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter...
CVE-2022-27258
Multiple Cross-Site Scripting XSS vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter...
CVE-2022-27258: Improper Neutralization of Input During Web Page Generation
Multiple Cross-Site Scripting XSS vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter...
PT-2022-18333
Name of the Vulnerable Software and Affected Versions Hubzilla versions prior to 7.2 Description The issue allows remote attackers to include arbitrary php files via the schema parameter or redirect a logged in user to an arbitrary URL via the rpath parameter. Recommendations For versions prior t...