3 matches found
CVE-2013-7467: Improper Neutralization of Input During Web Page Generation
Simple Machines Forum SMF 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter...
PT-2019-7016
Name of the Vulnerable Software and Affected Versions Simple Machines Forum SMF version 2.0.4 Description The issue allows for XSS via the index.php?action=pm;sa=settings;save sa parameter. This means an attacker could potentially inject malicious scripts into the website, affecting user sessions...
CVE-2014-5016
Multiple cross-site scripting XSS vulnerabilities in LimeSurvey 2.05+ Build 140618 allow remote attackers to inject arbitrary web script or HTML via 1 the pid attribute to the getAttributejson function to application/controllers/admin/participantsaction.php in CPDB, 2 the sa parameter to...