Lucene search
+L

49 matches found

OSV
OSV
•added 2024/03/27 8:15 p.m.•16 views

CVE-2024-2996

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as problematic. Affected is an unknown function of the component Page Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS3.7AI score0.00519EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•19 views

PT-2024-23169 · Unknown · Bdtask Multi-Store Inventory Management System

Name of the Vulnerable Software and Affected Versions: Bdtask Multi-Store Inventory Management System versions up to 20240320 Description: A vulnerability was found in the Page Title Handler component of the system, which can lead to cross-site scripting. The manipulation can be launched remotely...

4.8CVSS3.3AI score0.00519EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•4 views

CVE-2024-2996: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as problematic. Affected is an unknown function of the component Page Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS3.8AI score0.00519EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•17 views

Inventory Management System 安全漏洞

Inventory Management System is an inventory management system for stemword individual developers. A security vulnerability exists in Bdtask Multi-Store Inventory Management System 20240320 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the component Page Title...

4.8CVSS3.6AI score0.00519EPSS
SaveExploits1References5
OSV
OSV
•added 2023/03/24 8:15 a.m.•16 views

CVE-2023-1616

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...

5.4CVSS3.7AI score0.00475EPSS
SaveExploits1References3
NVD
NVD
•added 2023/03/24 8:15 a.m.•31 views

CVE-2023-1616

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...

5.4CVSS4.3AI score0.00475EPSS
SaveExploits1References3
Prion
Prion
•added 2023/03/24 8:15 a.m.•30 views

Cross site scripting

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...

4CVSS5.3AI score0.00475EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•15 views

PT-2023-17121 · Teacms · Teacms

Name of the Vulnerable Software and Affected Versions: TeaCMS versions up to 2.0.2 Description: A problematic issue was found in TeaCMS, affecting an unknown function of the Article Title Handler component. This issue allows for cross site scripting when an attacker manipulates the input with...

5.4CVSS6.5AI score0.00475EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/24 12:00 a.m.•2 views

CVE-2023-1616: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

5.4CVSS3.8AI score0.00475EPSS
SaveExploits1References3
NVD
NVD
•added 2022/12/25 11:15 a.m.•17 views

CVE-2022-4731

A vulnerability, which was classified as problematic, was found in myapnea up to 29.0.x. Affected is an unknown function of the component Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 29.1.0 is able to address thi...

5.4CVSS0.00537EPSS
SaveExploits0References4
OSV
OSV
•added 2022/12/25 10:20 a.m.•24 views

CVE-2022-4731 myapnea Title cross site scripting

A vulnerability, which was classified as problematic, was found in myapnea up to 29.0.x. Affected is an unknown function of the component Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 29.1.0 is able to address thi...

2.4CVSS3.9AI score
SaveExploits0References6
CVE
CVE
•added 2022/12/25 10:20 a.m.•67 views

CVE-2022-4731

CVE-2022-4731 affects myapnea up to version 29.0.x, with a cross-site scripting vulnerability in the Title Handler that can be triggered remotely. Multiple connected sources confirm the issue and recommend upgrading to version 29.1.0 as the fix; the patch is identified as 99934258530d761bd5d09809...

5.4CVSS4.4AI score0.00537EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/25 12:00 a.m.•5 views

CVE-2022-4731: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in myapnea up to 29.0.x. Affected is an unknown function of the component Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 29.1.0 is able to address thi...

5.4CVSS3.9AI score0.00537EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/25 12:00 a.m.•13 views

MyApnea 跨站脚本漏洞

MyApnea is an open source web framework for MyApnea. A cross-site scripting vulnerability exists in MyApnea version 29.0.x. The vulnerability stems from an unknown function in its Title Handler component that allows an attacker to implement cross-site scripting...

5.4CVSS4.3AI score0.00537EPSS
SaveExploits0References5
NVD
NVD
•added 2022/12/11 8:15 a.m.•31 views

CVE-2022-4400

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-21526...

6.1CVSS0.00379EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/11 8:15 a.m.•28 views

Cross site scripting

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-21526...

5.8CVSS6.1AI score0.00379EPSS
SaveExploits0References2
CVE
CVE
•added 2022/12/11 12:00 a.m.•63 views

CVE-2022-4400

CVE-2022-4400 affects the zbl1996 FS-Blog Title Handler. The vulnerability stems from an issue in the Title Handler’s processing that enables cross-site scripting (XSS). Exploitation could be remote. Documents consistently describe XSS impact but do not provide concrete patch versions or remediat...

6.1CVSS4.8AI score0.00379EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/12/11 12:00 a.m.•39 views

CVE-2022-4400 zbl1996 FS-Blog Title cross site scripting

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-21526...

3.5CVSS6.2AI score0.00379EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/11 12:00 a.m.•8 views

CVE-2022-4400 zbl1996 FS-Blog Title cross site scripting

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-21526...

3.5CVSS4.2AI score0.00379EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/11 12:00 a.m.•15 views

PT-2022-27061 · Unknown · Zbl1996 Fs-Blog

Name of the Vulnerable Software and Affected Versions: zbl1996 FS-Blog affected versions not specified Description: A vulnerability was found in the component Title Handler of zbl1996 FS-Blog, which leads to cross site scripting. The manipulation can be initiated remotely, affecting some unknown...

6.1CVSS5.9AI score0.00379EPSS
SaveExploits0References6
Rows per page
Query Builder