CVE-2021-47981

Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows authenticated attackers to inject malicious scripts by submitting XSS payloads through the sDescription parameter. Attackers can craft CSRF forms targeting the admin.php?p=sliders-form endpoint to execute...

PT-2026-41467

Name of the Vulnerable Software and Affected Versions Quick.CMS version 6.7 Description An issue in the sliders form allows authenticated attackers to inject malicious scripts by submitting payloads through the sDescription parameter. This can be achieved by crafting CSRF Cross-Site Request Forge...

CVE-2021-47981: Improper Neutralization of Input During Web Page Generation

Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows authenticated attackers to inject malicious scripts by submitting XSS payloads through the sDescription parameter. Attackers can craft CSRF forms targeting the admin.php?p=sliders-form endpoint to execute...

TCMAN GIM Cross-Site Scripting Vulnerability

TCMAN GIM is a CMMS from TCMAN, Inc. that can be used in a variety of areas: industrial, facilities, healthcare, fleet and maintenance services. A cross-site scripting vulnerability exists in TCMAN GIM version v8.0.1, which stems from the sReferencia, sDescription, txtCodigo, and txtDeripcion...

CVE-2014-2526: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive before 6.7 allow remote attackers to inject arbitrary web script or HTML via the 1 sForumName or 2 sDescription parameter to Forum/manage/ForumManager.lsp; 3 sHint, 4 sWord, or 5 nId parameter to Forum/manage/hangman.lsp; 6 user...