CVE-2026-72747: Improper Neutralization of Input During Web Page Generation

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrators visit the users management page, the unsanitized phone value is rendered via innerHTML, executing the injected...

CVE-2018-10364

BigTree before 4.2.22 has XSS in the Users management page via the name or company field...

CVE-2018-10364: Improper Neutralization of Input During Web Page Generation

BigTree before 4.2.22 has XSS in the Users management page via the name or company field...

PT-2018-9849

Name of the Vulnerable Software and Affected Versions: BigTree versions prior to 4.2.22 Description: The issue concerns a problem with the Users management page, where input in the name or company field is not properly sanitized, leading to potential XSS issues. Recommendations: For versions prio...