PT-2024-21363

Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description The issue is related to a Cross-Site Request Forgery CSRF in the component /core/tools/delete translation.php. This allows for unauthorized actions to be performed on behalf of a user without their knowledg...

UBUNTU-CVE-2020-7994

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the 2 nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the 3...

CVE-2020-7994: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the 2 nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the 3...

PT-2017-19080

Name of the Vulnerable Software and Affected Versions EPESI versions 1.8.2 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the original or new parameter in the update translation.php file. This can be exploited by sending malicious input to the...