PT-2019-18557

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Self-Stored Cross Site Scripting XSS issue exists due to the lack of input validation in the 'New State' field, allowing an attacker to execute HTML or JavaScript code. Recommendations For...

CVE-2017-1000428

flatCore-CMS 1.4.6 is vulnerable to reflected XSS in usermanagement.php due to the use of $SERVER'PHPSELF' to build links and a stored XSS in the admin log panel by specifying a malformed User-Agent string...

Self Stored Cross site scripting

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-47188. panel Product: http://swag.atlassian.com Vulnerability Type: Self Stored Cross site scripting Cross site scripting...