Sitecore cross-site scripting vulnerability (CNVD-2019-26203)

Sitecore is an online marketing content management system CMS from Sitecore, Denmark. The system supports content editing, multiple languages, multi-site deployment, digital asset management and more. A cross-site scripting vulnerability exists in Sitecore CMS 9.0.1 and prior versions. The...

cPanel cross-site scripting vulnerability (CNVD-2019-26199)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

SAP Information Steward Cross-Site Scripting Execution Vulnerability

SAP Information Steward is a data management and integrity solution from SAP. The product supports data analysis, data along and metadata management and other functions. A cross-site scripting vulnerability exists in SAP Information Steward version 4.2. The vulnerability stems from a lack of prop...

min-http-server cross-site scripting vulnerability

min-http-server is a lightweight http static resource server . A cross-site scripting vulnerability exists in min-http-server all versions. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

Wikindx Cross-Site Scripting Vulnerability (CNVD-2020-22365)

Wikindx is a suite of virtual research environments online bibliography and quote/notes management and article creation system. A cross-site scripting vulnerability exists in Wikindx. The vulnerability stems from the WEB application lacking proper validation of client-side data. An attacker can...

GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2019-24241)

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 version 5.3.1.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side...

Arastta eCommerce Cross-Site Scripting Vulnerability

Arastta eCommerce is an open source eCommerce platform. A cross-site scripting vulnerability exists in Arastta eCommerce version 1.6.2. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

Magento cross-site scripting vulnerability (CNVD-2019-26241)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. There is a cross-site scripting vulnerability in Magento , the vulnerability stems from the lack of proper validati...

Magento cross-site scripting vulnerability (CNVD-2019-26233)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, version 2.2.9 before...

Magento Cross-Site Scripting Vulnerability (CNVD-2019-26219)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. A cross-site scripting vulnerability exists in Magento. The vulnerability stems from the lack of proper validation ...

SAP R/3 Enterprise Application Cross-Site Scripting Vulnerability

SAP R/3 Enterprise Application is the German SAP SAP company's set of enterprise resource planning ERP software. A cross-site scripting vulnerability exists in SAP R/3 Enterprise Application. The vulnerability stems from the lack of proper validation of client-side data in the web application. An...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-34775)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

WordPress Attendance Manager Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Attendance Manager Plugin is an attendance management plugin used in it. A cross-site scripting vulnerability exists in...

Joruri CMS Cross-Site Scripting Vulnerability

Joruri CMS is a Ruby-based content management system CMS. A cross-site scripting vulnerability exists in Joruri CMS 2017 Release2 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to...

Samsung SCX-824 Cross-Site Scripting Vulnerability

The Samsung SCX-824 is a multifunction printer from Samsung South Korea. A cross-site scripting vulnerability exists in the Samsung SCX-824. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute...

VFront Cross-Site Scripting Vulnerability

VFront is a set of PHP and Javascript written for MySQL or PostgreSQL database open source front-end management tools . A cross-site scripting vulnerability exists in Vfront version 0.99.5. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2019-15675)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite 7.8.4 and earlier versions. The vulnerabili...

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2019-15665)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Mozilla Firefox versions prior to 67, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit thi...

Computrols CBAS Web Cross-Site Scripting Vulnerability

Computrols CBAS is a building automation system from Computrols USA. A cross-site scripting vulnerability exists in Computrols CBAS Web. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

Joomla! cross-site scripting vulnerability (CNVD-2019-15713)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in versions of Joomla! prior to 3.9.6. The vulnerability stems from a lack of proper validation of...