The vulnerability of the mod_proxy_ftp module in the Apache HTTP Server allows attackers to perform cross-site scripting attacks.

The vulnerability of the modproxyftp module in the Apache HTTP Server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the generateRow() function in the PHP Spreadsheet library allows attackers to perform cross-site scripting attacks.

The vulnerability of the generateRow function in the PHP Spreadsheet library is related to the lack of protective measures for web page structures. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

PT-2025-7271 · Weeek · Weeek

Name of the Vulnerable Software and Affected Versions: WEEEK affected versions not specified Description: The issue is related to the lack of protection for the web page structure in the WEEEK task and project management service. This could allow a remote attacker to execute arbitrary JavaScript...

The vulnerability of the iCMS content management system allows a attacker to perform XSS attacks.

The vulnerability of the iCMS content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted HTTP requests...

The vulnerability in the web interface of the IBM Security Directory Integrator and IBM Security Verify Directory Integrator software allows a perpetrator to execute arbitrary code and expose sensitive information.

The vulnerability of the web interface of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tool is related to the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious acto...

PT-2024-5954 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to insufficient protection of the web page structure in Adobe Experience Manager, which can allow a remote attacker to conduct cross-site scripting attacks...

The vulnerability of Firefox browser for iOS arises from the lack of protection for website structure. This allows attackers to add unsafe elements to a page after a certain delay.

The vulnerability of Firefox browser for iOS is related to the lack of security measures for handling web page structures. Exploiting this vulnerability allows a malicious actor to add insecure elements to a page after a certain delay...

The vulnerability of the reports_admin.php component in the Cacti network monitoring software allows a malicious attacker to execute XSS attacks remotely.

The vulnerability of the reportsadmin.php component in the Cacti network monitoring software, a database management system from Oracle, is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows an attacker to perform XSS attac...

PT-2023-5002 · Microsoft · Dynamics 365 For Finance/Operations

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations affected versions not specified Description: The issue is related to insufficient protection of the web page structure, which can allow a remote attacker to perform cross-site scripting attack...

PT-2023-5000 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to insufficient protection of the web page structure, allowing for cross-site scripting attacks. An attacker could exploit this to perform...

PT-2023-2317 · Microsoft · Dynamics 365 Customer Voice

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Customer Voice affected versions not specified Description: The issue is related to insufficient protection of the web page structure, allowing for cross-site scripting attacks. An attacker can exploit this to perform...

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the PHP-Fusion CMS, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the PHP-Fusion CMS exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Adobe Digital Editions e-book reading program, related to the lack of protective measures for website structures, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Digital Editions e-book reading program relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a hacker to execute arbitrary code through a specially created link...

The vulnerability of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, is related to insufficient protection of the web page structure, allowing a hacker to execute arbitrary code.

The vulnerabilities of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, are related to insufficient protection of the web page structure. Exploiting these vulnerabilities allows a malicious actor to execute...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the graphical web interface of the microprogramming software-based Cisco IP Phones 6800, Cisco IP Phone 7800, and Cisco IP Phone 8800 allows a perpetrator to execute arbitrary code or access confidential information.

The vulnerability of the graphical web interface of Cisco IP Phone 6800, Cisco IP Phone 7800, and Cisco IP Phone 8800 exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain access ...

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP multifunctional device allows a hacker to inject any code into the protected web page.

The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...

The vulnerability of WebSphere Application Server’s application servers allows attackers to inject arbitrary web or HTML code.

The vulnerability of WebSphere Application Server applications exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted URL...