Lucene search
K

8 matches found

EUVD
EUVD
added 2025/12/18 9:31 p.m.2 views

EUVD-2025-204352

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form redirect URL configuration. This allows malicious scripts to execute in users' browsers through unvalidated form configuration settings...

5.1CVSS5.8AI score0.00024EPSS
Exploits0References3
OSV
OSV
added 2025/12/18 8:15 p.m.1 views

CVE-2022-50683

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form redirect URL configuration. This allows malicious scripts to execute in users' browsers through unvalidated form configuration settings...

5.4CVSS5.8AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/18 7:53 p.m.3 views

CVE-2022-50683 Kentico Xperience <= 13.0.74 Form Configuration Stored XSS

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form redirect URL configuration. This allows malicious scripts to execute in users' browsers through unvalidated form configuration settings...

5.4CVSS5.9AI score0.00024EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/05/15 2:29 a.m.1 views

SUSE CVE-2024-31443

Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in formsave function in dataqueries.php is not thoroughly checked and is used to concatenate the HTML statement in growrightpanetree function from lib/html.php , finally resulting in...

5.4CVSS6.2AI score0.00493EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/10/25 12:0 a.m.1 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Visual Form Builder prior to...

4.8CVSS4.9AI score0.00206EPSS
Exploits2References2
Drupal
Drupal
added 2012/05/02 12:0 a.m.675 views

SA-CORE-2012-002 - Drupal core multiple vulnerabilities

Denial of Service CVE: CVE-2012-1588 Drupal core's text filtering system provides several features including removing inappropriate HTML tags and automatically linking content that appears to be a link. A pattern in Drupal's text matching was found to be inefficient with certain specially crafted...

5.8CVSS5.8AI score0.00628EPSS
Exploits3References23
Packet Storm
Packet Storm
added 2006/03/06 12:0 a.m.19 views

aztek40.txt

/==========================================/ // AZTEK forums 4.0 multiple vulnerabilities PoC // Product: AZTEK forums // URL: http://www.forum-aztek.com/ // RISK: high /==========================================/ PoC 1- XSS - Post a message including the following line: '"alertdocument.cookie -...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2006/03/03 12:0 a.m.21 views

AZTEK forums 4.0 multiple vulnerabilities &#40;PoC&#41;

/==========================================/ // AZTEK forums 4.0 multiple vulnerabilities PoC // Product: AZTEK forums // URL: http://www.forum-aztek.com/ // RISK: high /==========================================/ PoC 1- XSS - Post a message including the following line:...

Exploits0
Rows per page
Query Builder