Cross-site Scripting (XSS)

productscmfcore, productspluggableauthservice and plone are vulnerable to cross-site scripting. An attacker is able to inject malicious script through unsanitized user-provided arguments...

Remote Code Execution (RCE)

node-prompt-here is vulnerable to remote code execution RCE. The runCommand of the file linux/manager.js accepts user-provided arguments without sanitization, allowing the user to get the control over the index. process.env.NMCLI...