PT-2026-50646

Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0 Description The Personal File Storage PFS module allows authenticated users to store HTML or JavaScript within a folder title. This occurs because the pff title variable is imported using a 'TXT' filter that fails to stri...

CVE-2021-29663

CourseMS aka Course Registration Management System 2.1 is affected by cross-site scripting XSS. When an attacker with access to an Admin account creates a Job Title in the Site area aka the admin/addjobs.php name parameter, they can insert an XSS payload. This payload will execute whenever anyone...

CVE-2018-20837

include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS...