EUVD-2023-30394

Malicious code in bioql PyPI...

CVE-2023-26599

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link...

CVE-2023-26599

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link...

CVE-2023-26599

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link...

Cross site scripting

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link...

PT-2023-20758 · Unknown · Triplesign +1

Name of the Vulnerable Software and Affected Versions: Tripleplay Platform versions prior to 3.4.0 Description: The issue allows attackers to inject client-side code to run as an authenticated user via a crafted link. This is a result of an XSS vulnerability in TripleSign. Recommendations: For...

CVE-2023-26599

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link...

CVE-2023-26599

CVE-2023-26599 describes an XSS vulnerability in Tripleplay Platform’s TripleSign component, affecting releases prior to Caveman 3.4.0. The issue allows an attacker to inject client-side code and execute it in the context of an authenticated user via a crafted link. The available sources consiste...

CVE-2023-26599: Improper Neutralization of Input During Web Page Generation

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link...