CVE-2018-17044

In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...

Cross site scripting

In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...

CVE-2018-17044: Improper Neutralization of Input During Web Page Generation

In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...

PT-2018-13858

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.1 Description The issue is related to stored XSS that exists via the title parameter in the admin/system manage/user config add.html page. Recommendations For YzmCMS version 5.1, update the software to a version that fixes thi...

CVE-2017-5453

A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. This vulnerability allows for spoofing but no scripted content can be run. This vulnerability affects Firefox 53...

Cross-site Scripting (XSS)

symphonycms/symphony-2 is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of the page title parameter, allowing self XSS attacks to occur...

Synology Calendar Cross-Site Scripting Vulnerability

Synology Calendar is a file protection program from Synology that runs on Synology NAS devices.Notification Center is one of the system notification components. A cross-site scripting vulnerability exists in Notification Center in Synology Calendar versions prior to 2.1.1-0502. A remote attacker...

CVE-2018-8915

Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...

CVE-2018-8915

Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...

CVE-2018-8915: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...

PT-2018-18713

Name of the Vulnerable Software and Affected Versions Synology Calendar versions prior to 2.1.1-0502 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the title parameter. This could potentially lead to unauthorized...

CVE-2018-10680

Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web site settings -- Basic setting -- Website title" and enters an XSS payload via the zbsystem/cmd.php ZCBLOGNAME parameter. NOTE: the vendor disputes the security relevance, noting ...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-08588)

MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.10. A remote attacker can exploit this vulnerability to obtain a user cookie with the 'title' parameter...

CVE-2018-10296

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

CVE-2018-10296

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

CVE-2018-10296

Technical details for CVE-2018-10296 are not publicly available in the provided documents. No concrete affected versions, root cause, or remediation are shown here. Monitor for updates in connected sources.

CVE-2018-10296

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

CVE-2018-10296: Improper Neutralization of Input During Web Page Generation

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

PT-2018-9806

Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.10 Description: The issue allows for XSS via the title parameter in the "mc-admin/post-edit.php" API endpoint. Recommendations: For MiniCMS version 1.10, avoid using the title parameter in the "mc-admin/post-edit.php" endpoi...

WordPress Events Manager Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up personal blog sites.Events Manager plugin is used in one of the registration plugin. A cross-site scripting vulnerability exists in th...