Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. The application does not sanitize the $subject parameter in the contact form on the "non-respondents" page, allowing a malicious user to inject and execute arbitrary web script...

Cross-site Scripting (XSS)

concrete5 is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the author's name in web/concrete/src/Conversation/Message/AuthorFormatter.php, allowing a malicious user to inject and execute arbitrary web script...

Cross-site Scripting (XSS)

concrete5 is vulnerable to cross-site scripting XSS attacks. The library is does not sanitize the getGroupBadgeDescription parameter in web/concrete/singlepages/members/profile.php, allowing a malicious user to inject and execute arbitrary web script...

Cross-site Scripting (XSS)

concrete5 is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the email parameter in web/concrete/singlepages/dashboard/users/search.php, allowing a malicious user to inject and execute arbitary webscript through it...

Cross-Site Scripting (XSS)

zendeskappssupport is vulnerable to cross-site scripting XSS attacks. The attacks exist because it does not sanitize SVG files during application submission, allowing a malicious user to inject and execute arbitrary webscript through the markup in a SVG file...

Cross-site Scripting (XSS)

craftcms/cms is vulnerable to cross-site scripting XSS attacks. The library is does not restrict direct access to the TemplateController, allowing a malicious user to inject and execute arbitrary web script...

Cross-site Scripting (XSS)

craftcms/cms is vulnerable to cross-site scripting XSS attacks. The library does not properly encode HTML in the control panel, allowing a malicious user to inject and execute arbitrary webscript...

Cross-Site Scripting (XSS)

drupal/core is vulnerable to cross-site scripting XSS attacks. Malicious users can inject arbitrary web script through the templatestring parameter in TwigEnvironment.php due to incorrect filtering of the parameter...

Cross-site Scripting (XSS)

Dolibarr is vulnerable to cross-site scripting XSS attacks. The library fails to sanitize the Title parameter in htdocs/admin/menus/edit.php, allowing a malicious user to inject and execute arbitrary web script...

Cross-site Scripting (XSS)

dolibarr is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize multiple parameters in htdocs/admin/company.php, allowing a malicious user to inject and execute arbitrary web script...

CVE-2015-4687

Cross-site scripting XSS vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-8354

Cross-site scripting XSS vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remote attackers to inject arbitrary web script or HTML via the refer parameter to wp-admin/users.php...

CVE-2015-8353

Cross-site scripting XSS vulnerability in the Role Scoper plugin before 1.3.67 for WordPress allows remote attackers to inject arbitrary web script or HTML via the objectname parameter in a rs-objectroleedit page to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Role Scoper plugin before 1.3.67 for WordPress allows remote attackers to inject arbitrary web script or HTML via the objectname parameter in a rs-objectroleedit page to wp-admin/admin.php...

CVE-2015-8350

Multiple cross-site scripting XSS vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 open-tab parameter in a wpctaglobalsettings action to wp-admin/edit.php or 2 wp-cta-variation-id parameter to...

CVE-2015-4687

CVE-2015-4687 corresponds to a Cross-Site Scripting (XSS) vulnerability in Ellucian Banner Student (formerly SunGard) version 8.5.1.2. The linked sources confirm an XSS flaw that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available records do ...

CVE-2015-8349

SourceBans before 2.0 pre-alpha is affected by CVE-2015-8349, a Cross-Site Scripting (XSS) vulnerability in the advSearch parameter of index.php. The root cause is insufficient filtration/validation of input data, allowing remote attackers to inject arbitrary web script or HTML. Exploitation cont...

CVE-2015-4687

Cross-site scripting XSS vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-8353

Cross-site scripting XSS vulnerability in the Role Scoper plugin before 1.3.67 for WordPress allows remote attackers to inject arbitrary web script or HTML via the objectname parameter in a rs-objectroleedit page to wp-admin/admin.php...