CVE-2021-35493

The WebFOCUS Reporting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, and TIBCO WebFOCUS Reporting Server contain easily exploitable Stored and Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker ...

CVE-2021-35493

The CVE-2021-35493 issue affects TIBCO WebFOCUS WebFOCUS Client, Installer, and Reporting Server (WebFOCUS components). It is a cross-site scripting vulnerability (stored and reflected) caused by improper validation of user-supplied input. Affected releases are WebFOCUS Client, Installer, and Rep...

CVE-2021-33672

Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the...

PT-2021-20250

Name of the Vulnerable Software and Affected Versions: SAP Contact Center's Communication Desktop component version 700 Description: The issue arises from missing encoding in the Communication Desktop component, allowing an attacker to send malicious scripts via chat messages. When a recipient...

PT-2021-15129

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions prior to 5.0.1 NetIQ Access Manager versions prior to 4.5.4 Description The issue is a Reflected Cross Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into a website, which wi...

CVE-2020-19283

A reflected cross-site scripting XSS vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19284

A stored cross-site scripting XSS vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field...

CVE-2020-19266

A stored cross-site scripting XSS vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19266

A stored cross-site scripting XSS vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19282: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field...

PT-2021-10330

Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue in the /weibo/comment component allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Weibo comment section. Recommendations: For Jeesn...

Dswjcms Cross-Site Scripting Vulnerability

Dswjcms is for individuals and personal lending launched a free p2p open source project , based on Thinkphp architecture of the industry system , fully automated installation mode , quickly build a P2P website . Dswjcms 1.6.4 version of the existence of cross-site scripting vulnerability , the...

Jeesns Cross-Site Scripting Vulnerabilities

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the editor's source field...

Dswjcms Cross-Site Scripting Vulnerability

Dswjcms is for individuals and personal lending launched a free p2p open source project , based on Thinkphp architecture of the industry system , fully automated installation mode , quickly build a P2P website . Dswjcms 1.6.4 version of the existence of cross-site scripting vulnerability , the...

CVE-2020-19284: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field...

PT-2021-22163

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 92 Thunderbird versions prior to 91.1 Thunderbird versions prior to 78.14 Firefox ESR versions prior to 78.14 Firefox ESR versions prior to 91.1 Description When delegating navigations to the operating system, Firefox...

Nature Easy Soft Network Technology ZenTao Cross-site Scripting Vulnerability

Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes features such as product management, project management, quality management and document...

CVE-2020-18126

Multiple stored cross-site scripting XSS vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...

Cross-site Scripting (XSS) - Stored in namelessmc/nameless

✍️ Description Stored XSS in google analytics. 🕵️‍♂️ Proof of Concept 1. goto 'http://localhost/Nameless/index.php?route=/panel/core/seo/' logged in as admin. 2. enter "G-XXXXXXXX'; javascript:alert1; alert1; instead will cause any admin who visits the SEO page to have the java script activated on...

PT-2021-21830

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.13.0 Description: A remote cross-site scripting XSS vulnerability was discovered in the Aruba AirWave Management Platform. This issue allows for the execution of malicious scripts on the...