CVE-2021-44856

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value...

CVE-2021-44856

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value...

CVE-2021-44856

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value...

CVE-2022-4731

A vulnerability, which was classified as problematic, was found in myapnea up to 29.0.x. Affected is an unknown function of the component Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 29.1.0 is able to address thi...

CVE-2022-4731 myapnea Title cross site scripting

A vulnerability, which was classified as problematic, was found in myapnea up to 29.0.x. Affected is an unknown function of the component Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 29.1.0 is able to address thi...

CVE-2022-4731

CVE-2022-4731 affects myapnea up to version 29.0.x, with a cross-site scripting vulnerability in the Title Handler that can be triggered remotely. Multiple connected sources confirm the issue and recommend upgrading to version 29.1.0 as the fix; the patch is identified as 99934258530d761bd5d09809...

Venganzas del Pasado 跨站脚本漏洞

Venganzas del Pasado is the source code for a website by Juan Schwindt, an individual developer. Venganzas del Pasado suffers from a cross-site scripting vulnerability that stems from thetitle parameter of several of its unknown functions that allows an attacker to implement cross-site scripting...

PT-2022-28050 · Unknown · Venganzas Del Pasado

Name of the Vulnerable Software and Affected Versions: Venganzas del Pasado affected versions not specified Description: A vulnerability was found in Venganzas del Pasado and classified as problematic. The manipulation of the argument the title leads to cross site scripting. The attack may be...

MyApnea 跨站脚本漏洞

MyApnea is an open source web framework for MyApnea. A cross-site scripting vulnerability exists in MyApnea version 29.0.x. The vulnerability stems from an unknown function in its Title Handler component that allows an attacker to implement cross-site scripting...

Cross-site Scripting (XSS)

collective.contact.widget is vulnerable to cross-site scripting. The vulnerability exists because the title function of widgets.py does not properly escape the title attribute before being rendered, allowing an attacker to inject and execute malicious javascript...

PYSEC-2022-42988

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the...

Collective 跨站脚本漏洞

Collective is an open source Plone plugin shared code base by Collective. A security vulnerability exists in Collective collective.contact.widget 1.12 and earlier versions, which stems from a title function in its src/collective/contact/widget/widgets.py file that allows attackers to implement...

SimpleRisk 跨站脚本漏洞

SimpleRisk is SimpleRisk open source a risk management software. Used to simplify enterprise risk management. A security vulnerability exists in SimpleRisk versions prior to 1.17.3 that originates in the function checkAndSetValidation in the file simplerisk/js/common.js, where manipulation of the...

CVE-2022-4602

A vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme-edit/ of the component Review Flow Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

CVE-2022-4596

A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

Shoplazza 安全漏洞

Shoplazza LifeStyle is an e-commerce site from Shoplazza, Inc. A security vulnerability exists in Shoplazza version 1.1 that stems from cross-site scripting due to incorrect manipulation of the parameter Title...

CVE-2022-4602

CVE-2022-4602 affects Shoplazza LifeStyle 1.1, specifically the Review Flow Handler’s /admin/api/theme-edit/ endpoint. The vulnerability arises from manipulating the Title parameter, enabling cross-site scripting with remote exploitation; the exploit has been disclosed publicly (VDB-216197). Acco...

Shoplazza LifeStyle 跨站脚本漏洞

Shoplazza LifeStyle is an e-commerce site from Shoplazza, Inc. A security vulnerability exists in Shoplazza LifeStyle version 1.1, which stems from cross-site scripting due to incorrect manipulation of the parameter Title...

CVE-2022-4596

Shoplazza 1.1 contains a cross-site scripting vulnerability in the Add Blog Post Handler. The issue arises from manipulating the Title argument for the endpoint /admin/api/admin/articles/, which can be exploited remotely and has public PoC material. Public advisories in multiple sources confirm t...

PT-2022-25160 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS version 2.1.1 Description: The issue allows remote attackers to run arbitrary code via the title field of the create article page. This is a Cross Site Scripting XSS issue, which means an attacker can inject malicious scripts into th...