CVE-2026-55779

Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage in src/RestoreAction.php builds ArchiveAdmin restore notifications rendered as CASTHTML and inserts $restoredItem-Title, $restoredItem-URLSegment, $restoredItem-CMSEditLink, and...

CVE-2017-20176

A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file newwindow.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2017-20176: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file newwindow.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2017-0371

MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attrtitle url;" attack within a DIV element that has an attacker-controlled URL in the title attribute...

PT-2022-7878

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.23.x through 1.23.15 MediaWiki versions 1.24.x through 1.27.x before 1.27.2 MediaWiki versions 1.28.x before 1.28.1 Description The issue allows remote attackers to discover the IP addresses of Wiki visitors via a...