Checkmk Cross-Site Scripting Vulnerability (CNVD-2022-21235)

Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by remote, authenticated attackers to inject arbitrary JavaScript into view headers via the javascript: URL...

Checkmk跨站脚本漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by remote, authenticated attackers to inject arbitrary JavaScript into view headers via the javascript: URL...

jenkins: improperly processes HTML content of list leads to XSS

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column headers...

jenkins: improperly processes HTML content of list leads to XSS

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column headers...

jenkins: improperly processes HTML content of list leads to XSS

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column headers...

PT-2020-2655 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.227 and earlier Jenkins LTS versions 2.204.5 and earlier Description: The issue is related to improper processing of HTML content in list view column headers, resulting in a stored XSS vulnerability. This vulnerability can ...

Stored XSS vulnerability in list view column headers

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier processed HTML embedded in list view column headers. This resulted in a stored cross-site scripting XSS vulnerability exploitable by users able to control the content of column headers. The following plugins are known to allow users to define...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the View Headers aka viewheaders functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the Subject header, 2 the From header, and 3 certain other unspecified headers...

CVE-2006-0978: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the View Headers aka viewheaders functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the Subject header, 2 the From header, and 3 certain other unspecified headers...