29800 matches found
PT-2021-10379
Name of the Vulnerable Software and Affected Versions: craftcms version 3.1.31 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the "/admin/settings/sites/new" API endpoint. The estimated number of potentially affected devices worldwide i...
PT-2021-15591
Name of the Vulnerable Software and Affected Versions: McAfee ePolicy Orchestrator ePO versions prior to 5.10 Update 10 Description: The issue allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...
CGI Script Market Magazine Gar Z Cross-site Script Vulnerabilities
CGI Script Market Magazine Gar Z is a CGI Script Market open source application. A CGI script that provides e-mail press release distribution capabilities for Web sites. A security vulnerability exists in Magazinger Z v.1.01, which originates from an arbitrary script that can be executed on a web...
EPrints Arbitrary File Read (CVE-2021-3342)
An Arbitrary File Read vulnerability exists in EPrints. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary web script into the effected system...
CVE-2021-24128
Unvalidated input and lack of output encoding in the Team Members WordPress plugin, versions before 5.0.4, lead to Cross-site scripting vulnerabilities allowing medium-privileged authenticated attacker contributor+ to inject arbitrary web script or HTML via the 'Description/biography' of a member...
CVE-2020-28899
The Web CGI Script on ZyXEL LTE4506-M606 V1.00ABDO.2C0 devices does not require authentication, which allows remote unauthenticated attackers via crafted JSON action data to /cgi-bin/gui.cgi to use all features provided by the router. Examples: change the router password, retrieve the Wi-Fi...
Monicahq Monica Stored Cross-Site Scripting (CVE-2021-27370)
A cross-site scripting vulnerability exists in Monicahq Monica. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Asus Askey Routers Cross-Site Scripting (CVE-2021-27403)
A cross-site scripting vulnerability exists in Asus Askey routers. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
CVE-2021-3150
A cross-site scripting XSS vulnerability on the Delete Personal Data page in Cryptshare Server before 4.8.0 allows an attacker to inject arbitrary web script or HTML via the user name. The issue is fixed with the version 4.8.1...
Cross site scripting
Multiple stored cross-site scripting XSS vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters...
CVE-2021-27695
Multiple stored cross-site scripting XSS vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters...
CVE-2021-3150: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability on the Delete Personal Data page in Cryptshare Server before 4.8.0 allows an attacker to inject arbitrary web script or HTML via the user name. The issue is fixed with the version 4.8.1...
CVE-2021-27695: Improper Neutralization of Input During Web Page Generation
Multiple stored cross-site scripting XSS vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters...
Cross-site scripting (XSS)
Cross-site scripting XSS in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field...
Batflat Cross-Site Scripting Vulnerability
Batflat is a simple, lightweight content management system CMS. A cross-site scripting vulnerability exists in "Navigation" in Batflat 1.3.6, which can be exploited by remote attackers to inject arbitrary web script or HTML via a field name...
ImpressCMS Cross-Site Scripting Vulnerability (CNVD-2021-17253)
ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums and photo albums. A cross-site scripting vulnerability exists in ImpressCMS profile version 1.4.2, which stems from a Display Name field that is not validly filtered for inpu...
CVE-2021-27677
Cross-site scripting XSS vulnerability in Galleries in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name...
CVE-2021-27678
Cross-site scripting XSS vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name...