CVE-2016-7103

Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

CVE-2016-8019

Cross-site scripting XSS vulnerability in attributes in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML via a crafted user input...

Cross site scripting

Cross-site scripting XSS vulnerability in attributes in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML via a crafted user input...

Cross site scripting

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

CVE-2016-8011

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

CVE-2017-6877

Cross-site scripting XSS vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows remote attackers to inject arbitrary web script...

Cross site scripting

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

CVE-2014-3926

CVE-2014-3926 is an XSS vulnerability in lg.cgi used by Cougar LG 1.9 (LG Looking Glass web apps). The issue arises from accepting the addr parameter without proper sanitization, enabling remote attackers to inject arbitrary web script or HTML. Connected documents (e.g., CNVD-2017-03337) describe...

CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in CMS Made Simple CMSMS 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage sitesetting General Settings globalmetadata" field...

CVE-2017-6555

Cross-site scripting XSS vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1description parameter aka "Design Manager Categories Category Description"...

Cross site scripting

Cross-site scripting XSS vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1description parameter aka "Design Manager Categories Category Description"...

CVE-2017-6555

Cross-site scripting XSS vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1description parameter aka "Design Manager Categories Category Description"...

CVE-2017-6556

CMS Made Simple (CMSMS) 2.1.6 is affected by a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary script/HTML via the adminpage > sitesetting > General Settings > globalmetadata field. The issue stems from inadequate input validation in th...

CVE-2017-6555

CMS Made Simple 2.1.6 is affected by a Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php, exploitable via the m1_description parameter under Design Manager > Categories > Category Description. The CVE-2017-6555 entry notes that remote authenticated users can inject arbi...

Cross Site Scripting injection vulnerability in SANADATA SanaCMS 7.3

Cross-site scripting XSS vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Vendor HomePage: https://www.sanadata.com/ Version : 7.3 Dork : intext:"SANADATA | SanaCMS 7.3" Tested on:Firefox...

Cross site scripting

Cross-site scripting XSS vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter...

CVE-2016-7138

Cross-site scripting XSS vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PYSEC-2017-61

Cross-site scripting XSS vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...