Lucene search
+L

29795 matches found

CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•17 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00385EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•22 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00717EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•20 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.4AI score0.00385EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•17 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00359EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•18 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.4AI score0.00448EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•17 views

Adobe Experience Manager security vulnerabilities

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.4AI score0.00717EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•14 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00775EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•21 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00738EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•18 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00385EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•16 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00479EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•17 views

Adobe Experience Manager security vulnerabilities

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.4AI score0.00676EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/06/12 5:15 p.m.•15 views

CVE-2024-37878

Cross Site Scripting vulnerability in TWCMS v.2.0.3 allows a remote attacker to execute arbitrary code via the /TWCMS-gh-pages/twcms/runtime/twcmsview/default,index.htm.php" PHP directly echoes parameters input from external sources...

6.1CVSS6.1AI score0.00374EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2024/06/07 7:37 p.m.•94 views

GHSA-5PXR-7M4J-JJC6 Cross-site scripting (XSS) vulnerability in Description metadata

Summary Regardless of the role or privileges, no user should be able to inject malicious JavaScript JS scripts into the body HTML. an XSS Cross-Site Scripting vulnerability, specifically a Stored XSS, which affects all pages of the website. Once the JS script is embedded in the body HTML, the XSS...

4.8CVSS5.7AI score0.00463EPSS
SaveExploits1References5
Mend
Mend
•added 2024/06/07 2:09 p.m.•8 views

CVE-2024-37160

Formwork is a flat file-based Content Management System CMS. An attackers requires administrator privilege to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages except the dashboard...

4.8CVSS0.00463EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2024/06/07 2:09 p.m.•40 views

CVE-2024-37160 Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata

Formwork is a flat file-based Content Management System CMS. An attackers requires administrator privilege to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages except the dashboard...

4.8CVSS5.4AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/07 12:00 a.m.•8 views

CVE-2024-37160: Improper Neutralization of Input During Web Page Generation

Formwork is a flat file-based Content Management System CMS. An attackers requires administrator privilege to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages except the dashboard...

4.8CVSS5.9AI score0.00463EPSS
SaveExploits1References1
Veracode
Veracode
•added 2024/06/06 8:38 a.m.•25 views

Reflected Cross Site Scripting (XSS)

dolibarr/dolibarr is vulnerable to a Reflected Cross-site Scripting XSS. The vulnerability is due to improper input validation in htdocs/compta/paiement/card.php, allowing remote attackers to inject arbitrary web script or HTML via the facid parameter...

4.6CVSS6.3AI score0.11978EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2024/06/03 9:30 p.m.•99 views

GHSA-HV2J-6654-X74Q Reflected Cross-Site Scripting (XSS) in Dolibarr

A Reflected Cross-site scripting XSS vulnerability located in htdocs/compta/paiement/card.php of Dolibarr before 19.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the facid parameter...

4.6CVSS4.5AI score0.11978EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/05/31 12:00 a.m.•7 views

PT-2024-29456

Name of the Vulnerable Software and Affected Versions Download Manager plugin for WordPress versions up to, and including, 3.2.90 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the wpdm-all-packages shortcode. This allows...

6.4CVSS0.00342EPSS
SaveExploits0References11
CNVD
CNVD
•added 2024/05/30 12:00 a.m.•52 views

JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2024-26516)

JFinalCMS is a content management system. JFinalCMS 20221020 and previous versions of cross-site scripting vulnerability, the vulnerability stems from the file /admin/content parameter Title of the user-supplied data lack of effective filtering and escaping, an attacker can use this vulnerability...

5.4CVSS6.6AI score0.00364EPSS
SaveExploits1References1
Rows per page
Query Builder