Lucene search
+L

5 matches found

NVD
NVD
added 2026/09/13 6:16 a.m.13 views

CVE-2026-90497

A vulnerability was determined in Fengoffice Feng Office up to 3.11.13.11. Affected by this vulnerability is the function getTitle of the file application/views/task/addtask.php of the component Task Title Output. Executing a manipulation of the argument ogobjects.name can lead to cross site...

5.1CVSS0.00191EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/13 5:45 a.m.43 views

CVE-2026-90497 Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting

A vulnerability was determined in Fengoffice Feng Office up to 3.11.13.11. Affected by this vulnerability is the function getTitle of the file application/views/task/addtask.php of the component Task Title Output. Executing a manipulation of the argument ogobjects.name can lead to cross site...

5.1CVSS0.00191EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/09/13 5:45 a.m.5 views

CVE-2026-90497 Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting

A vulnerability was determined in Fengoffice Feng Office up to 3.11.13.11. Affected by this vulnerability is the function getTitle of the file application/views/task/addtask.php of the component Task Title Output. Executing a manipulation of the argument ogobjects.name can lead to cross site...

5.1CVSS3.5AI score0.00191EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/13 12:00 a.m.11 views

PT-2026-90789

A vulnerability was determined in Fengoffice Feng Office up to 3.11.13.11. Affected by this vulnerability is the function getTitle of the file application/views/task/add task.php of the component Task Title Output. Executing a manipulation of the argument og objects.name can lead to cross site...

5.1CVSS3.5AI score0.00191EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 10:06 a.m.17 views

CVE-2019-13463

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because eschtml is not called for the "echo getthetitle" or "echo $term-name" statement...

6.1CVSS6.2AI score0.01144EPSS
SaveExploits0References1
Rows per page
Query Builder