27443 matches found
Cross site scripting
A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2019-9592
A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
Cross site scripting
A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
Cross site scripting
A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter...
CVE-2019-9593
CVE-2019-9593 affects ShoreTel Connect ON SITE 18.82.2000.0. The vulnerability is a reflected XSS via the page parameter on a ShoreTel Connect ONSITE web page, enabling remote attackers to inject arbitrary script/HTML. The issue is documented across multiple sources (NVD and Mitel/OnSite disclosu...
CVE-2019-9591
ShoreTel Connect ONSITE prior to 19.49.1500.0 is affected by a reflected XSS via the brandUrl parameter. Impact is arbitrary script injection in the user’s browser. Root cause: unvalidated input reflected into the page. Affected component: signin.php (brandUrl parameter). Remediation: upgrade to ...
CVE-2019-9592
A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2019-9592
CVE-2019-9592 affects ShoreTel Connect ONSITE 19.45.1602.0 with a reflected XSS via the url parameter in the signin flow. The root cause is improper handling of the url parameter allowing arbitrary script execution in the victim’s browser. Public references consistently cite the affected version ...
CVE-2019-9591
A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter...
WordPress WooCommerce Plugin Cross-site Scripting (CVE-2019-9168)
A cross-site scripting vulnerability exists in WordPress WooCommerce Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
CVE-2019-9226
CVE-2019-9226 affects baigo CMS 2.1.1 with a persistent XSS in the bg_console/index.php?m=opt&c=request URI, exploitable via the opt[base][BG_SITE_NAME] parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Documented impact is user-visible script injection;...
Cross site scripting
An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request, as demonstrated by the...
CVE-2019-9016
An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request, as demonstrated by the...
CVE-2019-9016
CVE-2019-9016 affects MOPCMS, a PHP/MySQL-based CMS. The connected CNVD entry confirms a cross-site scripting vulnerability exists in MOPCMS up to 2018-11-30, exploitable via the form[name] parameter in a mod=column request (example URI shown). The root cause is persistent XSS allowing remote att...
Oracle Reports Developer Component Cross-site Scripting (CVE-2019-2413)
A cross-site scripting vulnerability exists in Oracle Reports component. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
CVE-2018-19782
Multiple cross-site scripting XSS vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the 1 c parameter or 2 a parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the 1 c parameter or 2 a parameter...
CVE-2018-19782
CVE-2018-19782: Multiple cross-site scripting (XSS) vulnerabilities in FreshRSS 1.11.1 affect GET requests by injecting scripts via the c parameter or the a parameter. The issue enables remote attackers to execute arbitrary web script/HTML in the context of the user session. Reported details come...
CVE-2018-20731
CVE-2018-20731 is a stored XSS vulnerability in NeDi prior to 1.7Cp3, exploitable via User-Chat.php. Public records in NVD/NVD-derived feeds describe that remote attackers can inject arbitrary web script or HTML. The connected feeds confirm NeDi versions affected up to at least 1.7Cp3 and referen...