1393 matches found
CVE-2018-20006: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PHPok v5.0.055. There is a Stored XSS vulnerability via the title parameter to api.php?c=post&f=save reachable via the index.php?id=book URI...
CVE-2018-19919
Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php datatitle parameter, as demonstrated by a crafted onload attribute of an SVG element...
Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2018-25034)
Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1. A remote attacker can exploit th...
tp5cms cross-site scripting vulnerability (CNVD-2018-26479)
tp5cms is a content management system CMS framework written in the PHP language and based on technologies such as ThinkPHP, swiper and bootstrap. A cross-site scripting vulnerability exists in the admin.php/system/set.html page in tp5cms 2017-05-25 and earlier versions. A remote attacker can...
Design/Logic Flaw
An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...
CVE-2018-19693
An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...
CVE-2018-19693
An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...
CVE-2018-19693: Improper Neutralization of Input During Web Page Generation
An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...
CVE-2018-18372
A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ title parameter...
CVE-2018-18372
A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ title parameter...
CVE-2018-18372
A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ title parameter...
Library CMS Cross-Site Scripting Vulnerability
Library CMS is a library category display platform. A cross-site scripting vulnerability exists in KAASoft Library CMS version 2.1.1. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via the 'title' parameter...
CVE-2018-18372: Improper Neutralization of Input During Web Page Generation
A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ title parameter...
PT-2018-14419
Name of the Vulnerable Software and Affected Versions KAASoft Library CMS - Powerful Book Management System version 2.1.1 Description A Stored XSS issue has been found, allowing potential exploitation via the "/admin/book/create/" endpoint, specifically through the title parameter. Recommendation...
CVE-2018-14690
An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross-site scripting vulnerabilities in the title and subtitle parameters to generalSettings.view that could be used to steal session information of a victim...
LimeSurvey Cross-Site Scripting Vulnerability (CNVD-2019-31188)
LimeSurvey formerly known as PHPSurveyor is an open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution, and data collection functions. appendix is one of the appendix components. A cross-site scripting vulnerability...
CVE-2018-17140
The Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a qlinsert action to wp-admin/admin.php...
PT-2018-13920
Name of the Vulnerable Software and Affected Versions Quizlord plugin versions prior to 2.1 Description The issue allows for Stored XSS attacks through the title parameter in a ql insert action to "wp-admin/admin.php". Recommendations For Quizlord plugin versions prior to 2.1, update to version 2...
CVE-2018-17140: Improper Neutralization of Input During Web Page Generation
The Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a qlinsert action to wp-admin/admin.php...