PT-2026-51158

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description An open redirect issue exists in the 'stripe portal' and 'stripe checkout' endpoints. These endpoints accept unvalidated callbackUrl, successUrl, and cancelUrl parameters. Authenticated attackers ca...

CVE-2021-34370

Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

CVE-2024-41658 GHSL-2024-036: Reflected XSS in QrCodePage.js

Casdoor is a UI-first Identity and Access Management IAM / Single-Sign-On SSO platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via...

Cross-site Scripting (XSS)

Overview johnpbloch/wordpress-core is a web software you can use to create a website or blog. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the successurl and rejecturl parameters when requesting application passwords. An attacker can inject arbitrary web script...

GHSA-5PV6-RPRW-82WV Horizon Web Dashboard Open Redirect vulnerability

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...

CVE-2022-45582

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...

CVE-2022-45582

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...

DEBIAN-CVE-2022-45582

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...

Open redirect

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...

PYSEC-2023-153

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...

PT-2023-14709 · Unknown · Horizon Web Dashboard

Name of the Vulnerable Software and Affected Versions: Horizon Web Dashboard versions 19.4.0 through 20.1.4 Description: The issue is related to an Open Redirect vulnerability via the success url parameter. This allows for potential redirection to unintended websites. Recommendations: For Horizon...

pixiv: XSS Reflected at https://sketch.pixiv.net/ Via `next_url`

Hi, I Found XSS Reflected at https://sketch.pixiv.net/ Via Success URL Follow Me : Steps : 1. Open the URL below: https://sketch.pixiv.net/resignrequest/success?nexturl=javascript%3Aalert%2F%2Fdocument.domain 2. Pop ups appear : Impact If an attacker can control a script that is executed in the...