7 matches found
CVE-2019-14344
TemaTres 3.0 has reflected XSS via the replacestring or searchstring parameter to the vocab/admin.php?doAdmin=bulkReplace URI...
PT-2019-13623
Name of the Vulnerable Software and Affected Versions TemaTres version 3.0 Description The issue is related to reflected XSS. It can be triggered via the replace string or search string parameter to the "vocab/admin.php?doAdmin=bulkReplace" API endpoint. Recommendations For TemaTres version 3.0,...
CVE-2019-14344: Improper Neutralization of Input During Web Page Generation
TemaTres 3.0 has reflected XSS via the replacestring or searchstring parameter to the vocab/admin.php?doAdmin=bulkReplace URI...
CVE-2019-14343
TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...
Cross site scripting
TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...
PT-2019-13622
Name of the Vulnerable Software and Affected Versions TemaTres version 3.0 Description The issue is related to stored XSS, which occurs via the value parameter to the "vocab/admin.php?vocabulario id=list" URI. This allows for potential malicious script execution. Recommendations For TemaTres...