Lucene search
+L

5505 matches found

NVD
NVD
•added 2021/10/04 9:15 p.m.•24 views

CVE-2020-21496

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...

6.1CVSS0.00694EPSS
SaveExploits1References2
NVD
NVD
•added 2021/10/04 9:15 p.m.•87 views

CVE-2020-21494

A cross-site scripting XSS vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0...

6.1CVSS0.00694EPSS
SaveExploits1References2
Prion
Prion
•added 2021/10/04 9:15 p.m.•25 views

Cross site scripting

A cross-site scripting XSS vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0...

4.3CVSS6AI score0.00694EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2021/10/04 9:15 p.m.•17 views

Cross site scripting

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...

4.3CVSS6AI score0.00694EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2021/10/04 9:15 p.m.•21 views

Cross site scripting

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...

4.3CVSS6AI score0.00694EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/10/04 9:00 p.m.•36 views

CVE-2020-21496

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...

6AI score0.00694EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/10/04 9:00 p.m.•35 views

CVE-2020-21494

A cross-site scripting XSS vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0...

6AI score0.00694EPSS
SaveExploits1References2
CVE
CVE
•added 2021/10/04 9:00 p.m.•50 views

CVE-2020-21494

This CVE concerns Xiuno BBS 4.0.4 where an XSS vulnerability exists in the install/install.sql component. The underlying issue is that attacker-controlled input can alter the doctype value to 0, enabling execution of arbitrary web scripts or HTML. The affected artifact is the install.sql routine ...

6.1CVSS5.9AI score0.00694EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/10/04 9:00 p.m.•50 views

CVE-2020-21495

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...

6AI score0.00694EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/10/04 8:13 p.m.•51 views

Cross-site Scripting in LaraCMS

LaraCMS contains a stored cross-site scripting XSS vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor...

5.4CVSS5.1AI score0.00595EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/10/04 8:13 p.m.•56 views

GHSA-M72G-42Q6-GVC2 Cross-site Scripting in LaraCMS

LaraCMS contains a stored cross-site scripting XSS vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor...

5.4CVSS5.2AI score0.00595EPSS
SaveExploits1References3
OSV
OSV
•added 2021/09/30 5:13 p.m.•58 views

GHSA-H7MQ-27R7-W972 Cross-site Scripting in GilaCMS

A cross-site scripting XSS vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field...

5.4CVSS5.2AI score0.00493EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2021/09/30 5:13 p.m.•48 views

Cross-site Scripting in GilaCMS

A cross-site scripting XSS vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field...

5.4CVSS5.1AI score0.00493EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/09/30 5:12 p.m.•55 views

GHSA-6675-WWQR-JHMF Cross-site Scripting in GilaCMS

A stored cross-site scripting XSS vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...

5.4CVSS5.2AI score0.00516EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2021/09/30 5:12 p.m.•44 views

Cross-site Scripting in GilaCMS

A stored cross-site scripting XSS vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...

5.4CVSS5.1AI score0.00516EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/09/29 11:15 p.m.•20 views

CVE-2020-20781

A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...

5.4CVSS5.5AI score
SaveExploits0References1
NVD
NVD
•added 2021/09/29 11:15 p.m.•25 views

CVE-2020-20781

A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...

5.4CVSS0.00503EPSS
SaveExploits1References1
Prion
Prion
•added 2021/09/29 11:15 p.m.•24 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...

3.5CVSS5.2AI score0.00503EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2021/09/29 10:15 p.m.•32 views

CVE-2020-20131

LaraCMS v1.0.1 contains a stored cross-site scripting XSS vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module...

5.4CVSS0.00595EPSS
SaveExploits1References1
OSV
OSV
•added 2021/09/29 10:15 p.m.•17 views

CVE-2020-20131

LaraCMS v1.0.1 contains a stored cross-site scripting XSS vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module...

5.4CVSS5.5AI score
SaveExploits0References1
Rows per page
Query Builder