CVE-2015-2986

Cross-site scripting XSS vulnerability in rakuto.net hitSuji rktSNS2 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2985

CVE-2015-2985 concerns guide-park.com BBS X102 1.03, a bulletin board software. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via unspecified vectors, with the browser executing the payload. Affected software is BBS X102 Ver...

CVE-2015-6810

Cross-site scripting XSS vulnerability in Invision Power Services IPS Community Suite aka Invision Power Board, IPB, or Power Board 4.x before 4.0.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the eventlocationaddress array parameter to calendar/submit/...

CVE-2015-6809

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mass Contact module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer mass contact" permission to inject arbitrary web script or HTML via a category label...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

CVE-2015-6809

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

CVE-2015-6809

CVE-2015-6809 affects Bedita before 3.6.0, where three parameters (cfg[projectName] in index.php/admin/saveConfig; data[stats_provider_url] in index.php/areas/saveArea; data[description] in index.php/areas/saveSection) are vulnerable to XSS due to inadequate input filtering. The issue allows remo...

CVE-2015-6810

CVE-2015-6810 is an XSS vulnerability in Invision Power Services IPS Community Suite (IPS Community Suite) 4.x up to version 4.0.12.1. Remote authenticated users can inject arbitrary web script or HTML via the event_location[address] array parameter to calendar/submit/. The NVD entry lists a base...

CVE-2015-5612

Affected software: October CMS (build 271 and earlier). Vulnerability: cross-site scripting (XSS) via the caption tag of a profile image. Root cause: improper handling of caption tag leads to script/HTML injection. Impact: remote attacker can inject arbitrary script/HTML. Exploitation details are...

Cross site scripting

Cross-site scripting XSS vulnerability in the quick edit function in xmlhttp.php in MyBB aka MyBulletinBoard before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the content of a post...

Cross site scripting

Cross-site scripting XSS vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4552

CVE-2015-4552 describes an XSS vulnerability in the MyBB (MyBulletinBoard) quick edit feature ( xmlhttp.php ) prior to version 1.8.5. The issue allows remote attackers to inject arbitrary web script or HTML via the content of a post. The NVD entry lists affected software as MyBB before 1.8.5, wit...

CVE-2015-1516

Cross-site scripting XSS vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4552

Cross-site scripting XSS vulnerability in the quick edit function in xmlhttp.php in MyBB aka MyBulletinBoard before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the content of a post...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6805

Cross-site scripting XSS vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the message field in a private message...

Cross site scripting

Cross-site scripting XSS vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the message field in a private message...

CVE-2015-6805

CVE-2015-6805 (MDC Private Message plugin 1.0.0 for WordPress) is an XSS vulnerability where remote authenticated users can inject arbitrary script/HTML via the private message field. Multiple sources (NVD, CVE lists, WPVulnDB) corroborate that the flaw affects the message input and can lead to s...