Cross-site Scripting (XSS)

dolibarr is vulnerable to cross-site scripting XSS. With the USERLOGINFAILED setting,an attacker can inject arbitrary script in admin tools -- audit page, possibly stealing admin account...

Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. The attacks exist because lib/classes/event/userloginfailed.php does not escape the user-supplied username before returning it to the description during invalid login-attempt. This allows a malicious user to inject and execute arbitrary co...