Cross site scripting

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function...

Cross site scripting

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'...

Cross site scripting

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'...

CVE-2019-5947

CVE-2019-5947 is an XSS vulnerability in Cybozu Garoon (versions 4.6.0–4.10.1) exploitable via the Cabinet component. The issue allows an authenticated remote attacker to inject arbitrary script/HTML, potentially leading to arbitrary script execution in a user’s browser. Public sources (NVD, Red ...

CVE-2019-5937

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information...

CVE-2019-5937

CVE-2019-5937 affects Cybozu Garoon 4.0.0–4.10.1. The vulnerability is a cross-site scripting (XSS) flaw in the user information path, allowing remote authenticated attackers to inject arbitrary web script or HTML via user information. Impact is that an attacker can execute scripts in a victim’s ...

CVE-2019-5939

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'...

CVE-2019-5938

CVE-2019-5938 is a stored cross-site scripting vulnerability in Cybozu Garoon’s Mail application, affecting Cybozu Garoon 4.0.0 to 4.10.1. The issue allows remote attackers to inject arbitrary web script or HTML via the Mail component. Exploitation details are not provided in the connected docume...

CVE-2019-5940

Cybozu Garoon 4.x (4.0.0–4.10.1) is affected by Cross-site scripting via the Scheduler component (CVE-2019-5940). The vulnerability enables remote attackers to inject script/HTML into a user’s browser, constituting an XSS risk. Connected sources corroborate multiple related CVEs affecting Garoon ...

CVE-2019-5938

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'...

CVE-2019-5928

CVE-2019-5928 is a cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 that can be triggered through the Customize Item function, allowing an attacker to cause arbitrary script execution in a user’s browser. Technical details across sources indicate the issue stems from insuf...

CVE-2019-5928

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function...

CVE-2019-5929

CVE-2019-5929 concerns a Cross-site scripting vulnerability in Cybozu Garoon, specifically in the Memo component, in versions 4.0.0 through 4.6.3. The root cause is described (by CNVD and related records) as a lack of proper validation of client-side data in the web application, enabling remote a...

XSS Vulnerability at JEESNS Microblogs

JEESNS is an open source social management system developed on JAVA's enterprise-class platform. JEESNS microblogging at the existence of XSS vulnerability , an attacker can use the vulnerability to inject arbitrary Web script or HTML...

XSS Vulnerability at JEESNS Group Posts

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS group posts at the existence of XSS vulnerability , an attacker can be exploited to inject arbitrary Web script or HTML...

CVE-2018-16139

Cross-site scripting XSS vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web script or HTML via the db or action parameter to to bin/wxis.exe/bibliopac/...

Cross site scripting

Cross-site scripting XSS vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web script or HTML via the db or action parameter to to bin/wxis.exe/bibliopac/...

CVE-2018-16139

Cross-site scripting XSS vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web script or HTML via the db or action parameter to to bin/wxis.exe/bibliopac/...

CVE-2019-7409

Multiple cross-site scripting XSS vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the 1 page, 2 gbs, 3 side, 4 id, 5 imgid, 6 cat, or 7 orderby parameter...

CVE-2019-7411

Multiple stored cross-site scripting XSS in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via fields as follows: 1 Title, 2 Favicon, 3 Meta Description, 4 Subscribe Form Name field label, Last name field label, Email...