CVE-2019-13495

In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting XSS issues allows remote authenticated users to inject arbitrary web script via an rpSys.html Name or Location field...

Cross site scripting

In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting XSS issues allows remote authenticated users to inject arbitrary web script via an rpSys.html Name or Location field...

CVE-2019-13495

In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting XSS issues allows remote authenticated users to inject arbitrary web script via an rpSys.html Name or Location field...

Wordpress WPForms Plugin Cross-Site Scripting (CVE-2020-10385)

A cross-site scripting vulnerability exists in Wordpress WPForms plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVE-2020-5559

Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5552

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5557

Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5559

CVE-2020-5559 is a cross-site scripting vulnerability in WonderLink’s WL-Enq (WEB Enquete), affecting versions 1.11 and 1.12. The issue arises from insufficient validation in the web application's CGI layer, enabling remote attackers to inject arbitrary scripts or HTML via unspecified vectors. Im...

CVE-2020-5557

Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5557

The CVE-2020-5557 entry covers a cross-site scripting vulnerability (CWE-79) in CuteNews 2.0.1. Affected software is CuteNews/CutePHP’s News module version 2.0.1; the root cause is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact desc...

CVE-2020-5552

CVE-2020-5552 concerns the mailform PHP script by keitai-site.net, specifically version 1.04. The connected sources describe a stored cross-site scripting (CWE-79) vulnerability that can inject arbitrary script or HTML, potentially executing in the administrator’s browser when they access a site ...

CVE-2020-5559: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5557: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2020-18534

Name of the Vulnerable Software and Affected Versions WL-Enq versions 1.11 through 1.12 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 1.11 and 1.12, update to a version that contains a fix for this issue...

PT-2020-18527

Name of the Vulnerable Software and Affected Versions mailform version 1.04 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting. Recommendations For mailform version 1.04, consider disabling the featu...

CVE-2020-5552: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because eschtml is not called for the "echo getthetitle" or "echo $term-name" statement...