131 docs tagged with "XSS_Vulnerability"

qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php.

Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitr

Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before all

Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php.

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 1

A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.

Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.32

The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its

Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the 'sessionpri

SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI.

Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.

Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC all

There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below

Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehi

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 vi

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 vi

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 vi

A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 vi

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Managemen

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site S

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0.

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.

Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autoresp

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.18.

A Cross-site Scripting (XSS) vulnerability in the J-Web component of Juniper Networks Junos OS allow

Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-be

Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterToo

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.

Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.

kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).

Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.

Reflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows attackers

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repos

ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper

Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1.

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1.

Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execu

A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version 3.

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php.

OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtai

Cross Site Scripting (XSS) vulnerability in Neox Contact Center 2.3.9, via the serach_sms_api_name p

Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code vi

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console

Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege

Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/admin/network/wireless

Cudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admin/network/bandwidth

Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exists due to insuffici

Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) i

Reflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld Technologies

Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management consol

Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows rem

Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 all

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to ex

A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a rem

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to exec

Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacke

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote a

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to ex

Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary co

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting (XSS) via the keyword paramete

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbi

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbi

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbi

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbi

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbi

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbi

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbi

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbi

A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden

A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file w

A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute ar

Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to exe

Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow an attacker to exe

Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS versions affected to 8.5.13 and

A Cross Site Scripting (XSS) vulnerability in Concrete CMS from versions 9.2.0 to 9.2.2 allows an at

A Cross Site Scripting (XSS) vulnerability in Concrete CMS before 9.2.3 exists via the Name paramete

A Cross Site Scripting (XSS) vulnerability in Concrete CMS versions 8.5.12 and below, and 9.0 throug

A Cross Site Scripting (XSS) vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arb

Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute ar

Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute ar

Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive i

I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.

Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attacke

Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitr

Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers

Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to

Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scri

Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change userna

Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacke

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker

Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain

Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary cod

Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to esca

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

Cross Site Scripting (XSS) vulnerability in School Fees Management System v.1.0 allows a remote atta

Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a remo

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0.

Cross-site Scripting (XSS) - Reflected in GitHub repository structurizr/onpremises prior to 3194.

Cross Site Scripting (XSS) vulnerability in Setor Informatica SIL 3.1 allows attackers to run arbitr

Sourcecodester Online Food Menu 1.0 is vulnerable to Cross Site Scripting (XSS) via the 'Menu Name'

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allo

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allo

Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management Syste

Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute

Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attac

Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to exe

funboot v1.1 is vulnerable to Cross Site Scripting (XSS) via the title field in 'create a message .'