CVE-2020-10401

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-article.php by adding a question mark ? followed by the payload...

izbratska.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112423 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting izbratska.ru website and...

bantoozone.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1111541 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting bantoozone.com website an...

Stored XSS Vulnerability in Knight CMS

Knight CMS is a PHP-based open source professional talent system. Knight CMS has a stored XSS vulnerability that can be exploited by attackers to inject arbitrary Web script or HTML...

CVE-2020-6798

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be...

endomameta.blog.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1107977 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting endomameta.blog.jp websit...

smeb-nsk.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1106585 Security Researcher geeknik Helped patch 8675 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting smeb-nsk.ru website and it...

spartawilhelmina.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1102575 Security Researcher KhanJanny Helped patch 3056 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting spartawilhelmina.nl...

meratrans.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1102412 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

angelo-cremona.com Cross Site Scripting vulnerability

Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting angelo-cremona.com website and its users. Following coordinated and responsible vulnerabili...

climatecentre.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1093888 Security Researcher CityBoy Helped patch 96 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting climatecentre.org website and...

lexikon.immobilien-fachwissen.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1091821 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

PT-2020-15329 · Jenkins · Jenkins Brakeman Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Brakeman Plugin versions 0.12 and earlier Description: The issue is related to a stored cross-site scripting vulnerability. It occurs because the plugin does not escape values received from parsed JSON files when rendering them. This...

Security Bulletin: Security vulnerabilities have been identified in Websphere Application Server shipped with Predictive Customer Intelligence (CVE-2017-1381, CVE-2017-1382, CVE-2017-1380)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about security vulnerabilities affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletins Security Bulletin:...

Security Bulletin: A security vulnerability has been identified in Websphere Application Server shipped with Predictive Customer Intelligence (CVE-2017-1121)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about security vulnerabilities affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: Potenti...

lechvizit.com.ua Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1085145 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lechvizit.com.ua website a...

partnerize.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1084966 Security Researcher k0t Helped patch 2151 vulnerabilities Received 9 Coordinated Disclosure badges Received 98 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting partnerize.com website and its...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server that is shipped with IBM Rational ClearQuest (CVE-2017-1380)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Rational ClearQuest. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

thegardenfloristlismore.com.au Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1919 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting thegardenfloristlismore.com.au website and its users...

shorelinechildrensdental.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1080041 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...