CVE-2016-7808

CVE-2016-7808 affects Corega CG-WLBARGMH and CG-WLBARGNL routers. The issue is a Cross-site Scripting (CWE-79) vulnerability caused by insufficient input filtering in the affected web interfaces, allowing remote attackers to inject arbitrary web script/HTML via unspecified vectors. Multiple conne...

CVE-2016-7817

CVE-2016-7817 is a cross-site scripting vulnerability in the Simple keitai chat PHP application (2.0 and earlier) attributed to CWE-79. The vulnerability allows an attacker to induce the execution of arbitrary script or HTML in a victim’s browser, with the JVN/JVNDB entries describing both reflec...

CVE-2016-4906

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai...

CVE-2017-2187

CVE-2017-2187 describes a cross-site scripting vulnerability in WordPress plugin WP Live Chat Support prior to version 7.0.07 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected component is the plugin’s frontend handling which can exec...

CVE-2016-7813

Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the parameters hostname, database and username...

CVE-2016-7808

Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-7813

DERAEMON-CMS contains a cross-site scripting vulnerability (CWE-79) in install.php affecting version 0.8.9 and earlier. The flaw arises from processing the parameters hostname, database and username, allowing remote attackers to inject arbitrary web script or HTML, which can execute in the victim...

CVE-2016-7469

A stored cross-site scripting XSS vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an...

Craft CMS Cross-Site Scripting Vulnerability (CNVD-2017-13599)

Craft CMS is a content management system CMS. Craft CMS suffers from a cross-site scripting vulnerability. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CGI:IRC irc.cgi file cross-site scripting vulnerability

CGI:IRC is a Perl/CGI program that enables users to access IRC from a Web browser. A cross-site scripting vulnerability exists in the irc.cgi file in versions of CGI:IRC prior to 0.5.12. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2017-9452

Cross-site scripting XSS vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2017-9452

Cross-site scripting XSS vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML via the description parameter. This issue exists in core\admin\ajax\pages\save-revision.php and core\admin\modules\pages\revisions.php. Low-privileged...

CVE-2017-9441

Multiple cross-site scripting XSS vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML by uploading a crafted package, triggering mishandling of the 1 title or 2 version or 3 authorname parameter in manifest.json. This issue exists ...

Cross-site Scripting (XSS)

piwik is vulnerable to cross-site scripting XSS attacks. It is possible because it does not prevent the attackers from injecting web script or HTML...

CVE-2017-9366

Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting XSS vulnerability in modules/Base/Dashboard/Dashboard0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tabname parameter...

CVE-2017-7384

Cross-site scripting XSS vulnerability in FlipBuilder Flip PDF allows remote attackers to inject arbitrary web script or HTML via the currentHTMLURL parameter...

CVE-2017-7384

Cross-site scripting XSS vulnerability in FlipBuilder Flip PDF allows remote attackers to inject arbitrary web script or HTML via the currentHTMLURL parameter...

CVE-2017-7384

The provided data describes a Cross-Site Scripting (XSS) vulnerability in FlipBuilder Flip PDF, exploitable by remote attackers via the currentHTMLURL parameter to inject arbitrary web script or HTML. Affected software is FlipBuilder Flip PDF; the underlying cause and exact exploit vector are not...