8 matches found
EUVD-2022-1631
Malicious code in bioql PyPI...
Xain-Hotel Management System 2.5 Insecure Settings
==================================================================================================================================== | Title : Xain-Hotel Management System v2.5 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...
Cross-site Scripting in xain
XSS is possible via the use of the order query parameter. An example request would look like: http://host/ressources?order=%27alert1;...
GHSA-5CHX-GG25-V37M Cross-site Scripting in xain
XSS is possible via the use of the order query parameter. An example request would look like: http://host/ressources?order=%27alert1;...
Steve Pallen Xain Cross-Site Scripting Vulnerability
Steve Pallen Xain is a library that provides HTML markup for Elixir. A cross-site scripting vulnerability exists in versions of Steve Pallen Xain prior to 0.6.2, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'order' parameter...
CVE-2018-20302
An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter...
CVE-2018-20302
An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter...
CVE-2018-20302
Steve Pallen Xain is affected by an XSS vulnerability in versions prior to 0.6.2, exploitable via the order parameter. The issue is reported across multiple sources (CVE-2018-20302, related advisories). Remediation: upgrade to Xain 0.6.2 or newer to mitigate.