564 matches found
Cross-site Scripting (XSS)
s-cart is vulnerable to cross-site scirpting XSS. An attacker is able to inject and execute malicious script via the search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex...
CVE-2020-28457
This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...
Cross site scripting
This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...
CVE-2020-28457: Improper Neutralization of Input During Web Page Generation
This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...
Cross-Site Scripting (XSS)
ngx-bootstrap is vulnerable to cross-site scripting which allows an attacker to inject and execute arbitrary Javascript via the search and highlight functionality within the typeahead component...
Design/Logic Flaw
The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS...
CVE-2020-16140
The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS...
CVE-2020-16140: Improper Neutralization of Input During Web Page Generation
The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS...
PT-2020-14772
Name of the Vulnerable Software and Affected Versions Greenmart theme version 2.4.2 Description The search functionality of the Greenmart theme for WordPress is vulnerable to XSS. Recommendations For Greenmart theme version 2.4.2, update to a version that fixes the XSS issue in the search...
CVE-2020-24188
Cross-site scripting XSS vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to inject arbitrary web script or HTML via the request parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to inject arbitrary web script or HTML via the request parameter...
CVE-2020-24188: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to inject arbitrary web script or HTML via the request parameter...
Cross-Site Scripting (XSS)
atlas-webapp is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a user's browser via the search functionality...
Stored XSS in Apache Atlas
Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality...
GHSA-V62J-FCXQ-J239 Stored XSS in Apache Atlas
Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality...
DRUPAL-CONTRIB-2019-095
The Permissions by Term module extends Drupal by functionality for restricting access to single nodes via taxonomy terms. The module doesn't sufficiently restrict access to node previews, when the Search API module is used to display nodes in search result lists...
CVE-2019-3990
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality...
CVE-2019-3990: Improper Privilege Management
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality...
PT-2019-16832
Name of the Vulnerable Software and Affected Versions Harbor affected versions not specified Description A User Enumeration flaw exists, allowing information about registered users to be obtained via the "search" functionality in the "/users" API endpoint, which is supposed to be restricted to...