tiervermittlung.de Cross Site Scripting vulnerability OBB-3712818

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-43703

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43703

Os Commerce CVE-2023-43703 is a XSS vulnerability (reflected) affecting the product_info[][name] parameter, enabling injection of JavaScript in users’ browsers. Documented in multiple sources (CVE/NVD), including CVE-2023-43703 and CVEList entry for Os Commerce 4.12.56860. Exploitation details ar...

osCommerce Cross-Site Scripting Vulnerability

osCommerce is an open source online shopping e-commerce solution based on the GNUGPL license. osCommerce suffers from a cross-site scripting vulnerability that stems from susceptibility to a cross-site scripting XSS vulnerability that allows an attacker to execute unauthorized scripts in a user's...

libhv Cross-Site Scripting Vulnerability

libhv is ithewei open source than libevent/libuv/asio easier to use network library . libhv cross-site scripting vulnerability , the vulnerability stems from the vulnerability to cross-site scripting XSS attacks...

movie.webindia123.com Cross Site Scripting vulnerability OBB-3712026

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The Dark Side of Browser Isolation – and the Next Generation Browser Security Technologies

The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for protecting against browser exploits and malware downloads, it has become increasingly inadequate and insecure in today's SaaS-centric world...

CVE-2023-5162

The Options for Twenty Seventeen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social-links' shortcode in versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2023-44172

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminweixin.php...

WordPress plugin Options for Twenty Seventeen Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-43233

YZNCMS v1.3.0 contains a stored XSS in the cms/content/edit component, exploitable by injecting a crafted payload into the title parameter. Root cause: insufficient input validation/output encoding for the title field, enabling arbitrary web scripts/HTML to be stored and later rendered. Impact pe...

CVE-2023-43830

CVE-2023-43830 affects Subrion CMS v4.2.1. The vulnerability is a Cross-Site Scripting (XSS) bug in the /panel/configuration/financial/ endpoint, where a crafted payload injected into multiple fields—specifically ‘Minimum deposit’, ‘Maximum deposit’, and/or ‘Maximum balance’—allows an attacker to...

CVE-2023-43232

The CVE-2023-43232 entry concerns a stored XSS vulnerability in the Website column management feature of DedeBIZ v6.2.11, where an attacker can inject a crafted payload into the title parameter to execute arbitrary web scripts or HTML. Public records (NVD/Red Hat/EUVD/CNNVD/etc.) corroborate the ...

CVE-2023-44042

CVE-2023-44042 is a stored XSS vulnerability impacting Black Cat CMS 1.4.1, caused by injection into the Website header parameter in /settings/index.php. The available documents describe arbitrary web-script execution as the consequence but do not provide exploit details, affected versions beyond...

NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete

Description The plugin is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the galleryedit function, allowing an attacker to access arbitrary resources on the server. 1. Create a Gallery called "My Gallery" and note its ID. 2. Run the following code in...

inclusievandaag.be Cross Site Scripting vulnerability OBB-3707210

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

advocatekhoj.com Cross Site Scripting vulnerability OBB-3705364

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

flexogent.be Cross Site Scripting vulnerability OBB-3705135

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sidelink.com.au Cross Site Scripting vulnerability OBB-3703658

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

brainycp.com Cross Site Scripting vulnerability OBB-3701348

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...