1053 matches found
CVE-2018-19919
Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php datatitle parameter, as demonstrated by a crafted onload attribute of an SVG element...
Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2018-25034)
Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1. A remote attacker can exploit th...
tp5cms cross-site scripting vulnerability (CNVD-2018-26479)
tp5cms is a content management system CMS framework written in the PHP language and based on technologies such as ThinkPHP, swiper and bootstrap. A cross-site scripting vulnerability exists in the admin.php/system/set.html page in tp5cms 2017-05-25 and earlier versions. A remote attacker can...
CVE-2018-19693
An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...
Design/Logic Flaw
An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...
CVE-2018-19693
An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...
CVE-2018-18372
A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ title parameter...
CVE-2018-18372
A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ title parameter...
CVE-2018-18372
A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ title parameter...
Library CMS Cross-Site Scripting Vulnerability
Library CMS is a library category display platform. A cross-site scripting vulnerability exists in KAASoft Library CMS version 2.1.1. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via the 'title' parameter...
CVE-2018-14690
An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross-site scripting vulnerabilities in the title and subtitle parameters to generalSettings.view that could be used to steal session information of a victim...
LimeSurvey Cross-Site Scripting Vulnerability (CNVD-2019-31188)
LimeSurvey formerly known as PHPSurveyor is an open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution, and data collection functions. appendix is one of the appendix components. A cross-site scripting vulnerability...
CVE-2018-17140
The Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a qlinsert action to wp-admin/admin.php...
CVE-2018-17044
In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-17044
In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...
Cross site scripting
In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2017-5453
A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. This vulnerability allows for spoofing but no scripted content can be run. This vulnerability affects Firefox 53...
Cross-site Scripting (XSS)
symphonycms/symphony-2 is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of the page title parameter, allowing self XSS attacks to occur...
Synology Calendar Cross-Site Scripting Vulnerability
Synology Calendar is a file protection program from Synology that runs on Synology NAS devices.Notification Center is one of the system notification components. A cross-site scripting vulnerability exists in Notification Center in Synology Calendar versions prior to 2.1.1-0502. A remote attacker...