4 matches found
Cross site scripting
Multiple Cross Site Scripting XSS Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via 1 profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; 2 note...
CVE-2016-1000307
Multiple Cross Site Scripting XSS Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via 1 profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; 2 note...
PT-2017-7679
Name of the Vulnerable Software and Affected Versions ClipBucket version 2.8.1 and probably prior Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including profile desc, about me, schools, occupation, companies, hobbies, fav movies, fav...
CVE-2016-1000307: Improper Neutralization of Input During Web Page Generation
Multiple Cross Site Scripting XSS Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via 1 profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; 2 note...