Lucene search
+L

27443 matches found

CNVD
CNVD
added 2021/09/10 12:0 a.m.15 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74057)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the header...

5.4CVSS1.5AI score0.00687EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.19 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74056)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the editor's source field...

5.4CVSS1.6AI score0.00558EPSS
SaveExploits1References1
OSV
OSV
added 2021/09/09 6:15 p.m.7 views

CVE-2020-19266

A stored cross-site scripting XSS vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS5.9AI score0.00641EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/09/09 12:0 a.m.9 views

JEESNS 跨站脚本漏洞

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the "group comment" text field...

5.4CVSS6AI score0.00545EPSS
SaveExploits1References3
WPVulnDB
WPVulnDB
added 2021/09/08 12:0 a.m.19 views

More From Google <= 0.0.2 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /morefromgoogle.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.3AI score0.00895EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2021/09/08 12:0 a.m.25 views

EyouCMS Cross-Site Scripting Vulnerability (CNVD-2021-82430)

EyouCms is a free and open source enterprise content management system based on the TP5.0 framework that focuses on the needs of enterprise website users. A remote attacker can use the title parameter in the bindemail function to inject arbitrary web script or HTML...

4.3CVSS1.8AI score0.01214EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2021/09/07 8:15 p.m.26 views

CVE-2021-39499

A Cross-site scripting XSS vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the title parameter in bindemail function...

6.1CVSS0.01214EPSS
SaveExploits1References2
OSV
OSV
added 2021/09/07 8:15 p.m.20 views

CVE-2021-39499

A Cross-site scripting XSS vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the title parameter in bindemail function...

6.1CVSS5.8AI score
SaveExploits0References2
Prion
Prion
added 2021/09/07 8:15 p.m.17 views

Cross site scripting

A Cross-site scripting XSS vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the title parameter in bindemail function...

4.3CVSS6AI score0.01214EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/09/07 7:59 p.m.61 views

CVE-2021-39499

CVE-2021-39499 describes a cross-site scripting (XSS) vulnerability in Qiong ICP EyouCMS 1.5.4. The issue is triggered by supplying a crafted value to the title parameter in the bind_email function, allowing remote attackers to inject arbitrary web script or HTML. The reports consistently identif...

6.1CVSS6.1AI score0.01214EPSS
SaveExploits1References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2021/09/02 12:0 a.m.4 views

Oracle Fatwire Cross Site Scripting

A cross-site scripting vulnerability exists in Oracle Fatwire. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

4.9AI score
SaveExploits0
CNVD
CNVD
added 2021/09/01 12:0 a.m.35 views

DRK Odenwaldkreis Testerfassung Cross-Site Scripting Vulnerability

DRK Odenwaldkreis Testerfassung is an open source solution for obtaining and recording rapid test results for corona antigens.A cross-site scripting vulnerability exists in DRK Odenwaldkreis Testerfassung March-2021, which can be exploited by attackers to inject arbitrary web script or HTML via a...

6.1CVSS1.2AI score0.00937EPSS
SaveExploits1References1
Prion
Prion
added 2021/08/31 2:15 p.m.18 views

Cross site scripting

Cross Site Scripting XSS in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'...

3.5CVSS5.2AI score0.00716EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/31 1:16 p.m.48 views

CVE-2020-19049

Cross Site Scripting XSS in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Description" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'...

5.3AI score0.00716EPSS
SaveExploits1References1
Prion
Prion
added 2021/08/31 3:15 a.m.15 views

Cross site scripting

A cross site scripting XSS issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute arbitrary web script via various areas such as data-link-creator...

4.3CVSS6.2AI score0.00838EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/31 2:44 a.m.28 views

CVE-2021-27558

A cross site scripting XSS issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute arbitrary web script via various areas such as data-link-creator...

6.4AI score0.00838EPSS
SaveExploits1References1
NVD
NVD
added 2021/08/30 7:15 p.m.20 views

CVE-2021-35061

Multiple cross-site scripting XSS vulnerabilities in DRK Odenwaldkreis Testerfassung March-2021 allow remote attackers to inject arbitrary web script or HTML via all parameters to HTML form fields in all components...

6.1CVSS0.00937EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2021/08/16 6:22 p.m.7 views

CVE-2021-34665 WP SEO Tags <= 2.2.7 Reflected Cross-Site Scripting

The WP SEO Tags WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the saqtxtthefilter parameter in the /wp-seo-tags.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.2.7...

6.1CVSS6.1AI score0.00844EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/08/12 9:7 p.m.30 views

CVE-2020-20990

A cross site scripting XSS vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter...

5.5AI score0.00595EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/08/12 12:0 a.m.32 views

EyouCms Cross-Site Scripting Vulnerability

EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Hainan Zanzan Network Technology Co. An attacker can use the vulnerability to execute arbitrary web scripts or HTML...

5.4CVSS1.2AI score0.00528EPSS
SaveExploits1References1
Rows per page
Query Builder