Cross site scripting

Cross-site scripting XSS vulnerability in OpenText Secure MFT 2013 before 2013 R3 P6 and 2014 before 2014 R2 P2 allows remote attackers to inject arbitrary web script or HTML via the querytext parameter to userdashboard.jsp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the 1 section parameter to site/error.php or 2 ip parameter to site/tools/searchResults.php...

CVE-2015-3219

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in OpenStack Dashboard Horizon 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handl...

CVE-2015-6529

PHPIPAM 1.1.010 is affected by multiple XSS flaws due to unsanitized user input in site/error.php (section parameter) and site/tools/searchResults.php (ip parameter). Exploitation would allow injecting arbitrary scripts via these inputs, as reflected in multiple CVE references. A newer release ap...

CVE-2015-6529

Multiple cross-site scripting XSS vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the 1 section parameter to site/error.php or 2 ip parameter to site/tools/searchResults.php...

CVE-2015-6528

Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...

CVE-2015-6530

OpenText Secure MFT is affected by a Cross-site scripting (XSS) vulnerability in the web interface. The CVE-2015-6530 description states that versions 2013 before 2013 R3 P6 and 2014 before 2014 R2 P2 are vulnerable, exploitable via the querytext parameter to userdashboard.jsp, allowing remote at...

WordPress YouTube Embed Plugin <= 3.3.2 - XSS

The vulnerability exists in includes/options-profiles.php. It allows remote administrator to inject arbitrary web script or HTML via the Profile name field. Solution Update the plugin...

CVE-2015-4310

Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse 10.51 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse 10.51 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975...

CVE-2015-4310

CVE-2015-4310 affects Cisco Finesse 10.5(1) with multiple cross-site scripting (XSS) vulnerabilities arising from improper validation of user input in HTTP GET/POST parameters. An unauthenticated, remote attacker could lure a user to a crafted link and execute arbitrary script in the browser cont...

CVE-2015-5507

Cross-site scripting XSS vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrateui submodule is enabled, allows user-assisted remote attackers to inject arbitrary web script or HTML via a destination field label...

Cross site scripting

Cross-site scripting XSS vulnerability in the Navigate module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5495

Cross-site scripting XSS vulnerability in the Mobile sliding menu module 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer menu" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5492

Cross-site scripting XSS vulnerability in the Video Consultation module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5481

Cross-site scripting XSS vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter in the gdbbpressattachments page to wp-admin/edit.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors involving the field settings form...