1229 matches found
CVE-2020-5272
In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with alias and search parameters. The problem is patched in 1.7.6.5...
CVE-2019-19390
The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
Design/Logic Flaw
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
CVE-2018-10704 affects yidashi yii2cmf 2.0 and is described as an XSS vulnerability triggered via the /search q parameter. The connected documents corroborate XSS in yii2cmf 2.0, but explicit details such as whether the flaw is stored vs reflected, affected versions beyond 2.0, or concrete remedi...
CVE-2013-5988
A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...
Cross site scripting
A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...
CVE-2013-5988
The CVE-2013-5988 entry concerns an XSS vulnerability in the All in One SEO Pack WordPress plugin (pre-2.0.3.1) exposed via the Search parameter. Affected software is the All in One SEO Pack WordPress plugin; vulnerable component is the Search parameter handling in versions before 2.0.3.1. The ro...
CVE-2013-5988
A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...
Cross site scripting
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS...
CVE-2019-20220
In Support Incident Tracker SiT! 3.67, the searchid parameter in the searchincidentsadvanced.php page is affected by XSS...
Design/Logic Flaw
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued...
CVE-2019-18205
Multiple Reflected Cross-site Scripting XSS vulnerabilities exist in Zucchetti InfoBusiness before and including 4.4.1. The browsing component did not properly sanitize user input encoded in base64. This also applies to the search functionality for the searchKey parameter...
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
Design/Logic Flaw
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
CVE-2019-17535
CVE-2019-17535 affects Gila CMS up to version 1.11.4, enabling XSS in blog-list.php via the search parameter in both the gila-blog and gila-mag themes. The vulnerability stems from the same underlying issue as CVE-2019-9647, leading to potential execution of client-side code. The connected source...