29800 matches found
CVE-2021-33332: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Portlet Configuration module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, allows remote attackers to inject arbitrary web script or HTML via the...
CVE-2021-35265: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...
PT-2021-20600
Name of the Vulnerable Software and Affected Versions: SEO Backlinks WordPress plugin versions up to and including 4.0.1 Description: The issue allows attackers to inject arbitrary web scripts via Cross-Site Request Forgery, specifically through the loc config function found in the...
PYSEC-2021-875
The module AccessControl defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the contents of Script Python objects. The policies defined in AccessControl severely restrict access to...
CVE-2021-26799
Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...
CVE-2021-26799
Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...
CVE-2021-26799
CVE-2021-26799 affects Omeka Classic up to version 2.7, with a Cross Site Scripting (XSS) vulnerability in the admin/files/edit path that lets remote attackers inject arbitrary web script or HTML. The connected documents confirm the affected product and vulnerable component, but do not provide ex...
CVE-2021-26799
Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...
CASAP Automated Enrollment Cross-Site Scripting Vulnerability (CNVD-2021-57787)
CASAP Automated Enrollment is an automated enrollment system from the CASAP organization. The goal of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easily retrievable. SourceCodester CASAP Automated...
Cross site scripting
Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the classname parameter to updateclass.php...
CVE-2021-27332
Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the classname parameter to updateclass.php...
CVE-2021-26224
CVE-2021-26224 : A cross-site scripting (XSS) vulnerability in SourceCodester Fantastic-Blog-CMS v1.0 allows remote attackers to inject arbitrary web script or HTML via the search field (search.php). The connected references confirm the affected product/version and the input vector, but no detail...
Cross site scripting
Cross-site scripting XSS vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to contentmanagementsystem\admin\newcontent.php...
CVE-2021-25197
Cross-site scripting XSS vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to contentmanagementsystem\admin\newcontent.php...
CVE-2021-26227
Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the student information parameters to editstud.php...
Cross site scripting
Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to saveuser.php...
CVE-2021-26230: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to saveuser.php...
CASAP Automated Enrollment Cross-site Scripting Vulnerability
CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve...
Fortics sz.chat has an unspecified vulnerability
Fortics sz.chat is a messaging app from the Brazilian company Fortics. version 4 of Fortics sz.chat has a security vulnerability that could be exploited by attackers to inject web script and HTML into the message box...
