CVE-2017-2164

Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4880

CVE-2016-4880 is a stored cross-site scripting vulnerability in baserCMS environments, affecting baserCMS core (3.0.10 and earlier) and the Blog plugin (3.0.10 and earlier). The incident arises from insufficient input filtering, allowing an attacker with Administrative access to inject arbitrary ...

CVE-2016-4883

Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2122

CVE-2017-2122 is a stored cross-site scripting vulnerability in Nessus, affecting Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2. It allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors, potentially executing arbitrary JavaScript in the logged...

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2164

CVE-2017-2164 corresponds to a cross-site scripting vulnerability in the installer component of SOY CMS (1.8.12 and earlier). The root cause is a flaw in processing parameters (CWE-79) in the installer, enabling a remote attacker to cause arbitrary web-script or HTML execution in a user’s browser...

CVE-2017-2122

Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Dolibarr Cross-Site Scripting Vulnerability

Dolibarr ERP/CRM is the software that manages your company's business information. A cross-site scripting vulnerability exists in Dolibarr that could be exploited by remote attackers to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to inject arbitrary web script or HTML persistently via the name of an uploaded image...

CVE-2017-8892

Cross-site scripting XSS vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to inject arbitrary web script or HTML persistently via the name of an uploaded image...

CVE-2017-8892

Cross-site scripting XSS vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to inject arbitrary web script or HTML persistently via the name of an uploaded image...

Serviio Media Server Cross-Site Scripting

A cross-site scripting vulnerability exists in Serviio Media Server. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Cross site scripting

Cross-site scripting XSS vulnerability in modules/Base/Box/checkfornewversion.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter...

CVE-2017-8763

Cross-site scripting XSS vulnerability in modules/Base/Box/checkfornewversion.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter...

CVE-2017-8763

CVE-2017-8763 affects Telaxus EPESI, specifically versions <= 1.8.2, where an XSS flaw exists in modules/Base/Box/check_for_new_version.php due to a crafted URI lacking the cid parameter. Reported impacts indicate remote injection of arbitrary script/HTML. OpenVAS notes EPESI

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...

CVE-2015-9057

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...

CVE-2015-9057

CVE-2015-9057 describes multiple cross-site scripting (XSS) vulnerabilities affecting Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9. The issue allows remote attackers to inject arbitrary web script or HTML via parameters in URLs such as /users/index.htm, /quarantine/spam/manage.htm, /quaran...

CVE-2015-9057

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...