EUVD-2021-10359

Malware in sbrugna...

CVE-2021-23260

Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site...

CVE-2021-23260 Stored XSS Vulnerability in File Name of the File Upload function

Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site...

CVE-2021-23260: Improper Neutralization of Input During Web Page Generation

Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site...

PT-2021-15420

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue allows authenticated users with Site roles to inject XSS scripts via file names. These scripts will execute in the browser for the same user and...

CVE-2021-23260

Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site...

Drupal Core Information Disclosure Vulnerability (CNVD-2016-01932)

Drupal is a free and open source content management system developed in PHP. Drupal Core has a security vulnerability. Depending on the data that has been added to the form or saved before the array, allows an attacker can lead to a user to get all the roles on the site...