717 matches found
CVE-2024-21730
CVE-2024-21730 describes a self-XSS in Joomla! core tied to the fancyselect list field layout, where inputs are not properly escaped. The vulnerability enables a self-XSS vector and requires user interaction for exploitation (per CVSS: UI:R, I:L, C:L). Reports consistently identify this as part o...
PT-2024-19024 · Joomla +2 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the fancyselect list field layout, which does not correctly escape inputs. This leads to a self-XSS vector, allowing potential...
CVE-2024-21730: Improper Neutralization of Input During Web Page Generation
The fancyselect list field layout does not correctly escape inputs, leading to a self-XSS vector...
[20240702] - Core - Self-XSS in fancyselect list field layout
The fancyselect list field layout does not correctly escape inputs, leading to a self-XSS vector...
GHSA-FHCX-F7JG-JX3F Mautic vulnerable to cross-site scripting in notifications via saving Dashboards
Impact Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards. Patches Update to Mautic 4.4.12. Workarounds None References -...
PT-2024-11536 · Mautic · Mautic
Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 4.4.12 Description: The issue is related to a self XSS vulnerability in the notifications within Mautic. Logged in users are vulnerable to this issue, which allows malicious code to be injected into the notification...
Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing
Impact Affected configurations: - Single-origin JupyterHub deployments - JupyterHub deployments with user-controlled applications running on subdomains or peer subdomains of either the Hub or a single-user server. By tricking a user into visiting a malicious subdomain, the attacker can achieve an...
GHSA-7R3H-4PH8-W38G Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing
Impact Affected configurations: - Single-origin JupyterHub deployments - JupyterHub deployments with user-controlled applications running on subdomains or peer subdomains of either the Hub or a single-user server. By tricking a user into visiting a malicious subdomain, the attacker can achieve an...
CVE-2024-28233 XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing
JupyterHub is an open source multi-user server for Jupyter notebooks. By tricking a user into visiting a malicious subdomain, the attacker can achieve an XSS directly affecting the former's session. More precisely, in the context of JupyterHub, this XSS could achieve full access to JupyterHub API...
CVE-2024-29865
Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form...
CVE-2024-29865
Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form...
CVE-2024-29865
Logpoint versions prior to 7.1.0 are vulnerable to Self-XSS on the LDAP authentication page . The flaw exists because the username field in the LDAP login form does not properly neutralize input, allowing for cross-site scripting. To remediate this, users should update to version 7.1.0 or later ....
CVE-2024-29865
Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form...
CVE-2024-29865
Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form...
CVE-2024-29865: Improper Neutralization of Input During Web Page Generation
Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form...
PT-2024-23090 · Logpoint · Logpoint
Name of the Vulnerable Software and Affected Versions: Logpoint versions prior to 7.1.0 Description: The issue allows Self-XSS on the LDAP authentication page via the username to the LDAP login form. Recommendations: For versions prior to 7.1.0, update to version 7.1.0 or later to resolve the...
Exploit for External Control of File Name or Path in Moodle
CVE-2023-30943Moodle self-xss Отказ от ответственности...
BIT-DISCOURSE-2022-46148 Discourse allows self-XSS through malicious composer message
Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the stable branch and versions 2.9.0.beta11 and prior on the beta and tests-passed branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS o...
