EUVD-2020-21452

Malware in sbrugna...

CVE-2020-29070

osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters...

PT-2020-17089

Name of the Vulnerable Software and Affected Versions osCommerce version 2.3.4.1 Description The issue allows an authenticated user to enter an XSS payload into the title section of newsletters, potentially leading to a cross-site scripting vulnerability. Recommendations For osCommerce version...

CVE-2015-9419: Improper Neutralization of Input During Web Page Generation

The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section...

CVE-2018-10367: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section...

CVE-2018-10121: Improper Neutralization of Input During Web Page Generation

plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the title section of an admin/index.php?id=pages&action=editpage&name=error404 aka Edit 404 page action...

PT-2018-9693

Name of the Vulnerable Software and Affected Versions: Monstra CMS version 3.0.4 Description: The issue concerns a stored XSS vulnerability. An attacker with access to the editor role can exploit this by entering a malicious payload in the title section of the "Edit 404 page" action, which is...