Cross site scripting

A cross-site scripting XSS vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2020-6171

CVE-2020-6171 : CLink Office 2.0 management console index page is vulnerable to Cross‑Site Scripting via the lang parameter. Remote attackers can inject arbitrary script/HTML, with impact including potential data theft or session hijacking as described in connected sources. The CVSS shows MEDIUM ...

EUVD-2020-27323

A cross-site scripting XSS vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Terramaster TOS Cross Site Scripting (CVE-2018-13334; CVE-2018-13335; CVE-2018-13357)

A cross site scripting exists in Terramaster TOS. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

XSS Vulnerability in E-Orange Internet Display System

Easy Orange Internet is a dedicated Internet information service provider. An XSS vulnerability exists in EOrange Internet's display website builder system, which can be exploited by attackers to inject arbitrary Web script or HTML...

CVE-2019-13495

In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting XSS issues allows remote authenticated users to inject arbitrary web script via an rpSys.html Name or Location field...

Cross site scripting

In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting XSS issues allows remote authenticated users to inject arbitrary web script via an rpSys.html Name or Location field...

CVE-2019-13495

In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting XSS issues allows remote authenticated users to inject arbitrary web script via an rpSys.html Name or Location field...

Wordpress WPForms Plugin Cross-Site Scripting (CVE-2020-10385)

A cross-site scripting vulnerability exists in Wordpress WPForms plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVE-2020-5559

Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5552

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5557

Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5559

CVE-2020-5559 is a cross-site scripting vulnerability in WonderLink’s WL-Enq (WEB Enquete), affecting versions 1.11 and 1.12. The issue arises from insufficient validation in the web application's CGI layer, enabling remote attackers to inject arbitrary scripts or HTML via unspecified vectors. Im...

CVE-2020-5557

Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5557

The CVE-2020-5557 entry covers a cross-site scripting vulnerability (CWE-79) in CuteNews 2.0.1. Affected software is CuteNews/CutePHP’s News module version 2.0.1; the root cause is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact desc...

CVE-2020-5552

CVE-2020-5552 concerns the mailform PHP script by keitai-site.net, specifically version 1.04. The connected sources describe a stored cross-site scripting (CWE-79) vulnerability that can inject arbitrary script or HTML, potentially executing in the administrator’s browser when they access a site ...

Cross site scripting

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because eschtml is not called for the "echo getthetitle" or "echo $term-name" statement...