A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Versions before 3.9.0 are vulnerable.


A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and Edit Filter page (manage_filter_edit_page.php) in MantisBT 2.1.0 through 2.17.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-13055.


A vulnerability in the web admin component of Mitel MiVoice Office 400 versions R5.0 HF3 (v8839a1) and earlier could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the start.asp page. A successful exploit could allow the attacker to execute arbitrary scripts to access sensitive browser-based information.


The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). The content of the in_hi_redirect parameter when prefixed with the https:// scheme is unsafely reflected in a HTML META tag in the HTTP response. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.


74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help_list&key.


A cross site scripting (XSS) vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML.


Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionPreview function.


A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML.


In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability.


A cross-site scripting (XSS) vulnerability in Beijing Liangjing Zhicheng Technology Co. Ltd ljcmsshop version 1.14 allows remote attackers to inject arbitrary web script or HTML via user.php by registering an account directly in the user center and then adding the payload to the delivery address.


Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionLoadCss function.


Shimo Document v2.0.1 contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the table content text field.


4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the Image URL. This vulnerability can result in an attacker to inject the XSS payload into the IMAGE URL. Each time a user visits that URL the XSS triggers and the attacker can be able to steal the cookie according to the crafted payload.


Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to team_import_xml_layouts.


A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a tnpc_render AJAX request containing either JavaScript in an options parameter or a base64-encoded JSON string containing JavaScript in the encoded_options parameter.


Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application.


An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting (XSS) in the console.


Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to inject an arbitrary web script or HTML in admin dashboard - \Categories\.


Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in the Employees First Name and Last Name fields.


FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in \Blog Content\ and each time any user will visit the blog the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.


Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter.


DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS.


The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages which could lead to Cross-Site Scripting issues


FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page the XSS triggers and the attacker can steal the cookie according to the crafted payload.


Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaScript or HTML via the ulgm_code_redeem POST Parameter in user-code-redemption.php the ulgm_user_first POST Parameter in user-registration-form.php the ulgm_user_last POST Parameter in user-registration-form.php the ulgm_user_email POST Parameter in user-registration-form.php the ulgm_code_registration POST Parameter in user-registration-form.php the ulgm_terms_conditions POST Parameter in user-registration-form.php the _ulgm_total_seats POST Parameter in frontend-uo_groups_buy_courses.php the uncanny_group_signup_user_first POST Parameter in group-registration-form.php the uncanny_group_signup_user_last POST Parameter in group-registration-form.php the uncanny_group_signup_user_login POST Parameter in group-registration-form.php the uncanny_group_signup_user_email POST Parameter in group-registration-form.php the success-invited GET Parameter in frontend-uo_groups.php the bulk-errors GET Parameter in frontend-uo_groups.php or the message GET Parameter in frontend-uo_groups.php.


Pi-hole 5.0 5.1 and 5.1.1 allows XSS via the Options header to the admin/ URI. A remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against other users and steal the session cookie.


Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.


Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fv_wp_fvvideoplayer_src JSON field in the data parameter.


Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in the Admin Portal in the Task and Description fields.


Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the firstname and lastname parameters of the registration form & loginsystem input fields.


Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the `Displayname` field when using the `Add` `Edit` or `Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML.


ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000 & WLC-4006 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the /authen/start/ module via the userid and password parameters.


Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags.


Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` exception-handling. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request.


A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element.


A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.


A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials.


CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Field Definition text field.


SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the component AddEvent.php via the name and comment parameters.


Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat Social feed Message(title-tag) Add new client (all-tags).


A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16 in the admin/index.php login portal webpage allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link enters credentials and submits the login form.


Multiple

Cross

Site

Scripting

(XSS)

vulneratiblities

exist

in

Cacti

in

graphs.php

and


A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the \announcement_gonggao\ parameter.


Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request.


Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat text-filed tags.


newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods which is triggered when viewing the \View Recipient Information\ of this order in \Order Management Office\.


Github

Read

Me

Stats

commit

was

discovered

to

contain

a

reflected

cross-site

scripting

(XSS)

vulnerability

via

the

function

renderError.


Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Create Folder function under the 'create' module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload as a path or folder name.


A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.


Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting (XSS) vulnerability in the search input field of the search module.


JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm which allows attackers to execute arbitrary web scripts or HTML via a crafted payload.


Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code browsing the post will trigger the XSS.


waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.


A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter.


RockOA

is

affected

by

a

cross-site

scripting

(XSS)

vulnerability

which

allows

remote

attackers

to

send

malicious

code

to

the

administrator

and

execute

JavaScript

code

because

does

not

perform

strict

filtering.


waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.


Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability.


XYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php?s=/Link/index.


Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting (XSS) vulnerability via the rule_name parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.


waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.


Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the devicename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the devicename information.


Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP MySQL Bootstrap and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'.


The issue navigation and search view in Jira Server and Data Center before version 8.5.12 from version 8.6.0 before version 8.13.4 and from version 8.14.0 before version 8.15.1 allows remote attackers to inject arbitrary HTML or JavaScript via a DOM Cross-Site Scripting (XSS) vulnerability caused by parameter pollution.


Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the ViewWorkflowSchemes.jspa and ListWorkflows.jspa endpoints. The affected versions are before version 8.5.11 from version 8.6.0 before 8.13.3 and from version 8.14.0 before 8.15.0.


TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting (XSS) vulnerability in the content parameter of the Rubric Block (Add) module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value.


The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the response via the cb_s_a AJAX action leading to a Reflected Cross-Site Scripting


Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting (XSS) vulnerability in the account reset function which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field.


BloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnerability by inserting a XSS payload within the 'fileurl' parameter.


HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By persuading an authenticated user to visit a malicious Web site a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker could exploit this vulnerability to perform cross-site scripting attacks Web cache poisoning and other malicious activities.


Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting (XSS) vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling.


Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the Screens Modal view. The affected versions are before version 8.5.11 from version 8.6.0 before 8.13.3 and from version 8.14.0 before 8.15.0.


Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself.


Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.09_55 was discovered to contain a cross-site scripting (XSS) vulnerability via the Ping diagnostic option.


A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA.


A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to perform cross-site scripting (XSS) attacks.


A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT. The repo_delete.php Delete Repository page allows execution of arbitrary code via a repo name (if CSP settings permit it). This is related to CVE-2018-16362.


A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation.


The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter.


The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.


A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks.


A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's browser if a crafted url is visited possibly through phishing.


svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.


A cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.


A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page.


Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.


Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.


The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload. An attacker can obtain access to a victim's webmail account by making them visit a malicious URL.


MendixSSO <= 2.1.1 contains endpoints that make use of the openid handler which is suffering from a Cross-Site Scripting vulnerability via the URL path. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser.


A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped impacting confidentiality and integrity. This issue affects: Open Build Service versions prior to 2.10.8.


An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.


Gollem before 3.0.13 as used in Horde Groupware Webmail Edition 5.2.22 and other products is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET dir parameter in the browser functionality affecting breadcrumb output. An attacker can obtain access to a victim's webmail account by making them visit a malicious URL.


A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's current browser session if a crafted url is visited possibly through phishing.


Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.


Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the \ActionStringID\ function.


An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the \routing.cgi\ Routing Table Entries via the \Remark\ text box or \remark\ parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries.


A Stored Cross-Site Scripting (XSS) vulnerability was found in status_filter_reload.php a page in the pfSense software WebGUI on Netgate pfSense version 2.4.4-p2 and earlier. The page did not encode output from the filter reload process and a stored XSS was possible via the descr (description) parameter on NAT rules.


phpwcms v1.9 contains a cross-site scripting (XSS) vulnerability in /image_zoom.php.


A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php.


An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php a component of the pfSense software WebGUI on version 2.4.4-p2 and earlier. The widget did not encode the descr (description) parameter of wake-on-LAN entries in its output leading to a possible stored XSS.


An authenticated Stored XSS (Cross-site Scripting) exists in the \captive.cgi\ Captive Portal via the \Title of Login Page\ text box or \TITLE\ parameter in IPFire 2.21 (x86_64) - Core Update 130. It allows an authenticated WebGUI user with privileges to execute Stored Cross-site Scripting in the Captive Portal page.


Stored cross-site scripting (XSS) vulnerability in the Name of application field found in the General Configuration page in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to rukovoditel_2.4.1/install/index.php.


Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.


Stored

cross-site

scripting

(XSS)

vulnerability

in

the

Copyright

Text

field

found

in

the

Application

page

under

the

Configuration

menu

in

Rukovoditel

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

a

crafted

website

name

by

doing

an

authenticated

POST

HTTP

request

to

/rukovoditel_2.4.1/index.php?module=configuration/save&redirect_to=configuration/application.


ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Post title or Post content fields.


There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename which contains JavaScript code which would result in XSS. Cross-site scripting enables attackers to steal data change the appearance of a website and perform other malicious activities like phishing or drive-by hacking.


Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the search_key GET Parameter in TinCan_Content_List_Table.php message GET Parameter in licensing.php tc_filter_group parameter in reporting-admin-menu.php tc_filter_user parameter in reporting-admin-menu.php tc_filter_course parameter in reporting-admin-menu.php tc_filter_lesson parameter in reporting-admin-menu.php tc_filter_module parameter in reporting-admin-menu.php tc_filter_action parameter in reporting-admin-menu.php tc_filter_data_range parameter in reporting-admin-menu.php or tc_filter_data_range_last parameter in reporting-admin-menu.php.


XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03


Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to inject arbitrary JavaScript HTML or CSS via Ajax actions. This affects mec_save_notifications and import_settings.


Magento versions 2.3.5-p1 and earlier and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. Successful exploitation could lead to arbitrary code execution.


A cross site scripting (XSS) vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings.


Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field.


WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the source field under the article management module.


LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module.


S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in /function/booksave.php.


LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.


EARCLINK ESPCMS-P8 contains a cross-site scripting (XSS) vulnerability in espcms_web\\espcms_load.php.


A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the \or Expiring Between\ parameter.


A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter.


WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box.


A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/.


Qibosoft

contains

a

stored

cross-site

scripting

(XSS)

vulnerability

in

the

component

/admin/index.php?lfj=friendlink&action=add.


Blog CMS v1.0 contains a cross-site scripting (XSS) vulnerability in the /controller/CommentAdminController.java component.


WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address field under the background links module.


WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link field under the background menu management module.


JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter.


MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn.


Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Company Name input field.


WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module.


S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in the search function.


The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically the vulnerability lies in the 'Analysis Report Description' field in 'About this Report' section. Remediated in >= 8.3.0.9 >= 9.0.0.1 and >= 9.1.0.0 GA.


Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


PNPSCADA 2.200816204020 allows cross-site scripting (XSS) which can execute arbitrary JavaScript in the victim's browser.


Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.


The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically the vulnerability lies in the 'pho:title' attribute of 'dashboardXml' parameter. Remediated in >= 7.1.0.25 >= 8.2.0.6 and >= 8.3.0.0 GA.


Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName\ \searchValue\ \searchDescription\ \searchDefaultValue\ \searchPlugin\ \searchDescription\ and \searchDynamic\ in the Server Properties and Security Audit Viewer JSP page


Quixplorer <=2.4.1 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically the vulnerability lies in the 'type' attribute of 'dashboardXml' parameter. Remediated in >= 7.1.0.25 >= 8.2.0.6 and >= 8.3.0.0 GA.


The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically the vulnerability lies in the 'Display Name' parameter. Remediated in >= 9.1.0.1


Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page malicious JavaScript content may be executed within the context of the victim's browser.


A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'


A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3 where an attacker can steal the user session cookie using this vulnerability present on Policies >> action >> Name Parameter


A stored cross-site scripting (XSS) vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote attackers to perform arbitrary Javascript execution through entering a crafted payload into the 'Model' field then saving.


An

issue

was

discovered

in

Observium

Professional

Enterprise

Community

It

is

vulnerable

to

Cross-Site

Scripting

(XSS)

due

to

the

fact

that

it

is

possible

to

inject

and

store

malicious

JavaScript

code

within

it.

This

can

occur

via

because

of


A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Article' field under the 'Article' plugin.


SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting (XSS) via the 'add subject' tab.


** DISPUTED ** Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload will execute on the class room which leads to stealing cookies from users who join the class. NOTE: Third-parties dispute the validity of this entry as a possible false positive during research.


An issue was discovered in Observium Professional Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via la_id to the /syslog_rules URI for edit_syslog_rule.


An issue was discovered in Observium Professional Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via the role_name or role_descr parameter to the roles/ URI.


A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.


An issue was discovered in Observium Professional Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via the graph_title parameter to the graphs/ URI.


An issue was discovered in Observium Professional Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via la_id to the /syslog_rules URI for delete_syslog_rule because of syslog_rules.inc.php.


A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.


Cross-Site scripting vulnerability in Micro Focus Access Manager product affects all version prior to version 5.0. The vulnerability could cause configuration destruction.


silverstripe-advancedreports

(aka

the

Advanced

Reports

module

for

SilverStripe)

through

is

vulnerable

to

Cross-Site

Scripting

(XSS)

because

it

is

possible

to

inject

and

store

malicious

JavaScript

code.

The

affects

admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item

(aka

report

preview)

when

an

SVG

document

is

provided

in

the

Description

parameter.


Nagios

Log

Server

contains

a

cross-site

scripting

(XSS)

vulnerability

in

through

the

parameter

which

may

impact

users

who

open

a

maliciously

crafted

link

or

third-party

web

page.


An issue was discovered in Observium Professional Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via the alert_name or alert_message parameter to the /alert_check URI.


An issue was discovered in Observium Professional Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via a /device/device=140/tab=wifi/view= URI.


A stored cross-site scripting (XSS) vulnerability in LimeSurvey before and including 3.21.1 allows authenticated users with correct permissions to inject arbitrary web script or HTML via parameter ParticipantAttributeNamesDropdown of the Attributes on the central participant database page. When the survey attribute being edited or viewed e.g. by an administrative user the JavaScript code will be executed in the browser.


A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module.


An issue was discovered in Observium Professional Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur in pages/contacts.inc.php.


Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack.


A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations.


Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting (XSS) vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username lastname or surname fields of its own profile and the malicious payload will be injected and reflected in the calendar of the user who submitted the payload. An attacker could escalate its privileges in case an admin visits the calendar that injected the payload.


An issue was discovered in Observium Professional Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. this can occur via /iftype/type= because of pages/iftype.inc.php.


WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks.


OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter.


A cross-site scripting (XSS) issue in REDCap 8.11.6 through 9.x before 10 allows attackers to inject arbitrary JavaScript or HTML in the Messenger feature. It was found that the filename of the image or file attached in a message could be used to perform this XSS attack. A user could craft a message and send it to anyone on the platform including admins. The XSS payload would execute on the other account without interaction from the user on several pages.


A DOM-based cross-site scripting (XSS) vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file.


In versions 16.0.0-16.0.0.1 15.1.0-15.1.0.5 14.1.0-14.1.3 13.1.0-13.1.3.4 and 12.1.0-12.1.5.2 a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system.


A flaw was found in Red Hat Quay where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerability is to confidentiality integrity as well as system availability.


A stored Cross-Site Scripting (XSS) vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via the import of a GF form. This code is interpreted by users in a privileged role (Administrator Editor etc.).


Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pages and parameters. NOTE: this was reported to the vendor in a publicly archived \Multiple Security Vulnerabilities in WebCit 926\ thread.


A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages and other users will be affected when viewing web pages.


Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability.


A Cross Site Scripting (XSS) vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field.


A stored Cross-Site Scripting (XSS) vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via a textarea field. This code is interpreted by users in a privileged role (Administrator Editor etc.).


SAP NetWeaver AS ABAP versions - 740 750 751 752 753 754 does not sufficiently encode URL which allows an attacker to input malicious java script in the URL which could be executed in the browser resulting in Reflected Cross-Site Scripting (XSS) vulnerability.


Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1 there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.


SAP Fiori Launchpad (News tile Application) versions - 750 751 752 753 754 755 allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code to a different end user (victim) because News tile does not sufficiently encode user controlled inputs resulting in Reflected Cross-Site Scripting (XSS) vulnerability. Information maintained in the victim's web browser can be read modified and sent to the attacker. The malicious code cannot significantly impact the victim's browser and the victim can easily close the browser tab to terminate it.


OpenSlides

is

a

free

Web-based

presentation

and

assembly

system

for

managing

and

projecting

agenda

motions

and

elections

of

assemblies.

OpenSlides

version

due

to

unsufficient

user

input

validation

and

escaping

it

is

vulnerable

to

persistant

cross-site

scripting

(XSS).

In

the

web

applications

users

can

enter

rich

text

in

various

places

e.g.

for

personal

notes

or

in

motions.

These

fields

can

be

used

to

store

arbitrary

JavaScript

Code

that

will

be

executed

when

other

users

read

the

respective

text.

An

attacker

could

utilize

this

vulnerability

be

used

to

manipulate

votes

of

other

users

hijack

the

moderators

session

or

simply

disturb

the

meeting.

The

vulnerability

was

introduced

with

on

which

is

first

included

in

the

release.

It

has

been

patched

in

version

in

commit

merged

in

master

on


A

cross-site

scripting

(XSS)

vulnerability

in

in

the

Event

Espresso

Core

plugin

before

for

WordPress

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

page

parameter.


Fluid

before

versions

and

is

vulnerable

to

Cross-Site

Scripting.

Three

XSS

vulnerabilities

have

been

detected

in

Fluid:

TagBasedViewHelper

allowed

XSS

through

maliciously

crafted

additionalAttributes

arrays

by

creating

keys

with

attribute-closing

quotes

followed

by

HTML.

When

rendering

such

attributes

TagBuilder

would

not

escape

the

keys.

ViewHelpers

which

used

the

CompileWithContentArgumentAndRenderStatic

trait

and

which

declared

escapeOutput

false

would

receive

the

content

argument

in

unescaped

format.

Subclasses

of

AbstractConditionViewHelper

would

receive

the

then

and

else

arguments

in

unescaped

format.

Update

to

versions

or

of

this

package

that

fix

the

problem

described.

More

details

are

available

in

the

linked

advisory.


TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 the system extension Fluid (typo3/cms-fluid) of the TYPO3 core is vulnerable to cross-site scripting passing user-controlled data as argument to Fluid view helpers. Update to TYPO3 versions 9.5.23 or 10.4.10 that fix the problem described.


vFairs 3.3 is affected by Insecure Permissions. Any user logged in to a vFairs virtual conference or event can modify any other users profile information or profile picture. After receiving any user's unique identification number and their own an HTTP POST request can be made update their profile description or supply a new profile image. This can lead to potential cross-site scripting attacks on any user or upload malicious PHP webshells as \profile pictures.\ The user IDs can be easily determined by other responses from the API for an event or chat room.


A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with firmware version 12.04.0055. This vulnerability allows authenticated attackers to obtain other users' information via a crafted POST request.


In vFairs 3.3 any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload. The user data stored by the database includes HTML tags that are intentionally rendered out onto the page and this can be abused to perform XSS attacks.


Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated remote attacker to conduct cross-site scripting (XSS) attacks against users on an affected system. The vulnerabilities are due to insufficient validation of user-supplied input that is processed by the web UI. An attacker could exploit these vulnerabilities by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information on an affected system.


A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. It is possible to perform XSS attacks through using the WebDAV functionality to upload files to a project (Authn users) using the users import functionality (Admin only) and changing the login text in the application configuration (Admin only).


touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cookie/session tokens redirecting the user to a malicious webpage and performing unintended browser action. The issue is patched in version 2.0.


touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement user redirection to a malicious webpage/website etc. The issue is patched in version 2.0.


fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credentials to log in to the background.


A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information. To exploit this vulnerability an attacker would need to have valid administrative credentials.


Formstone <=1.4.16 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper validation of user supplied input in the upload-target.php and upload-chunked.php files. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked or visited. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials force malware execution user redirection and others.


Online Marriage Registration System 1.0 is affected by stored cross-site scripting (XSS) vulnerabilities in multiple parameters.


PI Rest Adapter of SAP Process Integration (update provided in SAP_XIAF 7.31 7.40 7.50) does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.


SAP

NetWeaver

AS

ABAP

Business

Server

Pages

Test

Application

versions

does

not

sufficiently

encode

user-controlled

inputs

resulting

in

reflected

Cross-Site

Scripting

(XSS)

vulnerability.


SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB versions 700 701 702 730 731 740 750 751 752 753 754 is vulnerable to reflected Cross-Site Scripting (XSS) via different URL parameters as it does not sufficiently encode user controlled inputs.


SAP NetWeaver (Knowledge Management ICE Service) versions 7.30 7.31 7.40 7.50 allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting (XSS) vulnerability.


SAP Business Objects Business Intelligence Platform (Central Management Console) versions- 4.2 4.3 allows an attacker with administrator rights can use the web application to send malicious code to a different end user (victim) as it does not sufficiently encode user-controlled inputs for RecycleBin resulting in Stored Cross-Site Scripting (XSS) vulnerability.


SAP NetWeaver Design Time Repository (DTR) versions - 7.11 7.30 7.31 7.40 7.50 does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.


Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform versions 4.1 4.2 does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.


SAP Fiori Launchpad does not sufficiently encode user controlled inputs and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter resulting in reflected Cross-Site Scripting (XSS) vulnerability. With a successful attack the attacker can steal authentication information of the user such as data relating to his or her current session.


SAP Fiori Launchpad versions- 753 754 does not sufficiently encode user-controlled inputs and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter leading to reflected Cross-Site Scripting (XSS) vulnerability.


Digi International ConnectPort LTS 32 MEI Firmware Version 1.4.3 (82002228_K 08/09/2018) bios Version 1.2. Multiple cross-site scripting vulnerabilities exist that could allow an attacker to cause a denial-of-service condition.


SAP Commerce Cloud versions - 1808 1811 1905 2005 does not sufficiently encode user inputs which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered if an affected web page is visited resulting in Cross-Site Scripting (XSS) vulnerability.


Cross-site scripting (XSS) vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloader_mode parameter.


If a template tag was used in a select tag the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5 Firefox < 73 and Firefox < ESR68.5.


SAP

NetWeaver

AS

ABAP

(Business

Server

Pages

application

versions

does

not

sufficiently

encode

user

controlled

inputs

resulting

in

reflected

Cross-Site

Scripting

(XSS)

vulnerability.


SAP Disclosure Management before version 10.1 does not validate user input properly in specific use cases leading to Cross-Site Scripting.


Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50 7.51 7.52 7.53 7.54) does not sufficiently encode user-controlled inputs resulting in Reflected Cross-Site Scripting (XSS) vulnerability.


SAP NetWeaver Application Server JAVA(XML Forms) versions 7.30 7.31 7.40 7.50 does not sufficiently encode user controlled inputs which allows an authenticated User with special roles to store malicious content that when accessed by a victim can perform malicious actions by executing JavaScript leading to Stored Cross-Site Scripting.


Dynamics CRM Webclient Cross-site Scripting Vulnerability


The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS) which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site causing the malicious JavaScript to be rendered by the site and executed by the victim client.


The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS) which may allow an attacker to trick application users into performing critical application actions that include but are not limited to adding and updating accounts.


docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters after # sign) to load resources from server-side .md files. Due to lack of validation here it is possible to provide external URLs after the /#/ (domain.com/#//attacker.com) and render arbitrary JavaScript/HTML inside docsify page.


Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the (2) nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the (3) notenote parameter to the /htdocs/admin/dict.php?id=10 page; the (4) zipMAIN_INFO_SOCIETE_ZIP or emailmail parameter to the /htdocs/admin/company.php page; the (5) urldefaulturl fielddefaultkey or valuedefaultvalue parameter to the /htdocs/admin/defaultvalues.php page; the (6) keytranskey or keytransvalue parameter to the /htdocs/admin/translation.php page; or the (7) main_motd or main_home parameter to the /htdocs/admin/ihm.php page.


All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.


ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Album(sab) file.


A vulnerability has been identified in Camstar Enterprise Platform (All versions) Opcenter Execution Core (All versions < V8.2) Opcenter Execution Core (V8.2). An authenticated user with the ability to create containers packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitimate users being stolen. Should the attacker gain access to these cookies they could then hijack the session and perform arbitrary actions in the name of the victim.


A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions) which could enable a successful Cross-site Scripting (XSS attack) when using the products' web server.


A vulnerability has been identified in Climatix POL908 (BACnet/IP module) (All versions) Climatix POL909 (AWM module) (All versions < V11.32). A persistent cross-site scripting (XSS) vulnerability exists in the \Server Config\ web interface of the affected devices that could allow an attacker to inject arbitrary JavaScript code. The code could be potentially executed later by another (possibly privileged) user. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires no system privileges. An attacker could use the vulnerability to compromise the confidentiality and integrity of other users' web session.


A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Cross-Site Scripting stored attack against other WebReport users.


Cross-site Scripting (XSS) vulnerability in the 'host' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a scan target to store an XSS sequence in the Metasploit Pro console which will trigger when the operator views the record of that scanned host in the Metasploit Pro interface. This issue affects Rapid7 Metasploit Pro version 4.17.1-20200427 and prior versions and is fixed in Metasploit Pro version 4.17.1-20200514. See also CVE-2020-7355 which describes a similar issue but involving the generated 'notes' field of a discovered scan asset.


A

security

vulnerability

in

HPE

IceWall

SSO

Dfw

and

Dgfw

(Domain

Gateway

Option)

could

be

exploited

remotely

to

cause

a

remote

cross-site

scripting

(XSS).

HPE

has

provided

the

following

information

to

resolve

this

vulnerability

in

HPE

IceWall

SSO

DFW

and

Dgfw:


Cross-site Scripting (XSS) vulnerability in the 'notes' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a scan target store an XSS sequence in the Metasploit Pro console which will trigger when the operator views the record of that scanned host in the Metasploit Pro interface. This issue affects Rapid7 Metasploit Pro version 4.17.1-20200427 and prior versions and is fixed in Metasploit Pro version 4.17.1-20200514. See also CVE-2020-7354 which describes a similar issue but involving the generated 'host' field of a discovered scan asset.


A vulnerability has been identified in Climatix POL908 (BACnet/IP module) (All versions) Climatix POL909 (AWM module) (All versions < V11.32). A persistent cross-site scripting (XSS) vulnerability exists in the web server access log page of the affected devices that could allow an attacker to inject arbitrary JavaScript code via specially crafted GET requests. The code could be potentially executed later by another (privileged) user. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires no system privileges. An attacker could use the vulnerability to compromise the confidentiality and integrity of other users' web sessions.


A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions) which could cause a Reflective Cross-site Scripting (XSS attack) when using the products' web server.


A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Reflected) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker to inject arbitrary web script or HTML due to incorrect sanitization of user supplied data and achieve a Cross-Site Scripting reflected attack against other WebReport users.


jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove \<script>\ HTML tags that contain a whitespace character i.e: \</script >\ which results in the enclosed script logic to be executed.


An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console Basic Policy Editor user Interface.


HCL Notes versions previous to releases 9.0.1 FP10 IF8 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.


HCL iNotes v9 v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.


Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding.


An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console Policy Administration user interface.


A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier where it did not filter user-controllable parameters completely resulting in a reflected cross-site scripting attack. This flaw allows an attacker to leverage a phishing attack steal an unsuspecting user's cookies or other confidential information or impersonate them within the application's context.


The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability


Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in Jira issue filter export files. The affected versions are before 8.5.9 from version 8.6.0 before 8.12.3 and from version 8.13.0 before 8.13.1.


Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in user macro parameters. The affected versions are before version 7.4.2 and from version 7.5.0 before 7.5.2.


The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cross-site scripting (XSS) via Update User Profile.


A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-content parameter. This is displayed in the page footer of every front-end page and executed in the browser of visitors.


IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request a remote attacker could exploit this vulnerability to inject HTTP HOST header which will allow the attacker to conduct various attacks against the vulnerable system including cross-site scripting cache poisoning or session hijacking. IBM X-Force ID: 193655.


IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 193737.


RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators attempt to change the default security domain mapping the injected scripts could potentially be executed in their browser.


Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by injecting malicious client-side code into the 'URL/ Host / Connection' form in the 'DATA TO SERVER' configuration section.


Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7) Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7) Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7) Movable Type 6.5.3 and earlier (Movable Type 6.5) Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5) Movable Type 6.3.11 and earlier (Movable Type 6.3) Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3) Movable Type Premium 1.29 and earlier and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.


IBM Financial Transaction Manager 3.0.2 and 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192952.


IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 193738.


In Puma (RubyGem) before 4.3.2 and before 3.12.3 if an application using Puma allows untrusted input in a response header an attacker can use newline characters (i.e. `CR` `LF` or`/r` `/n`) to end the header and inject malicious content such as additional headers or an entirely new response body. This vulnerability is known as HTTP Response Splitting. While not an attack in itself response splitting is a vector for several other attacks such as cross-site scripting (XSS). This is related to CVE-2019-16254 which fixed this vulnerability for the WEBrick Ruby web server. This has been fixed in versions 4.3.2 and 3.12.3 by checking all headers for line endings and rejecting headers with those characters.


IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192957.


On BIG-IP ASM 15.1.0-15.1.0.5 a cross-site scripting (XSS) vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content including JavaScript code that will be executed when preview is opened.


In Puma (RubyGem) before 4.3.3 and 3.12.4 if an application using Puma allows untrusted input in an early-hints header an attacker can use a carriage return character to end the header and inject malicious content such as additional headers or an entirely new response body. This vulnerability is known as HTTP Response Splitting. While not an attack in itself response splitting is a vector for several other attacks such as cross-site scripting (XSS). This is related to CVE-2020-5247 which fixed this vulnerability but only for regular responses. This has been fixed in 4.3.3 and 3.12.4.


Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7) Movable Type 6.5.2 and earlier (Movable Type 6.5) Movable Type Advanced 7 r.4603 and earlier (Movable Type Advanced 7) Movable Type Advanced 6.5.2 and earlier (Movable Type Advanced 6.5) Movable Type Premium 1.26 and earlier (Movable Type Premium) and Movable Type Premium Advanced 1.26 and earlier (Movable Type Premium Advanced)) allows remote attackers to inject arbitrary web script or HTML in the block editor and the rich text editor via a specially crafted URL.


In PrivateBin versions 1.2.0 before 1.2.2 and 1.3.0 before 1.3.2 a persistent XSS attack is possible. Under certain conditions a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting (XSS) vulnerability. The vulnerability has been fixed in PrivateBin v1.3.2 & v1.2.2. Admins are urged to upgrade to these versions to protect the affected users.


OpenMRS 2.9 and prior copies \Referrer\ header values into an html element named \redirectUrl\ within many webpages (such as login.htm). There is insufficient validation for this parameter which allows for the possibility of cross-site scripting.


RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators open the affected report page the injected scripts could potentially be executed in their browser.


In OpenMRS 2.9 and prior the sessionLocation parameter for the login page is vulnerable to cross-site scripting.


RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators open the affected page the injected scripts could potentially be executed in their browser.


In OpenMRS 2.9 and prior the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting.


Cross-site scripting in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script allows error reports to be submitted and sent to the system administrator. Starting with SimpleSAMLphp 1.18.0 a new SimpleSAML\\Utils\\EMail class was introduced to handle sending emails implemented as a wrapper of an external dependency. This new wrapper allows us to use Twig templates in order to create the email sent with an error report. Since Twig provides automatic escaping of variables manual escaping of the free-text field in www/errorreport.php was removed to avoid double escaping. However for those not using the new user interface yet an email template is hardcoded into the class itself in plain PHP. Since no escaping is provided in this template it is then possible to inject HTML inside the template by manually crafting the contents of the free-text field.


RSA Archer versions prior to 6.7 P2 (6.7.0.2) contains a Document Object Model (DOM) based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM environment in the browser. The malicious code is then executed by the web browser in the context of the vulnerable web application.


A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7 5.9.1.13 Gen 6 version 6.5.4.7 6.5.1.12 6.0.5.3 SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.


IBM DOORS Next Generation (DNG/RRC) 6.0.2 6.0.6 6.0.6.1 and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176408.


IBM Intelligent Operations Center for Emergency Management Intelligent Operations Center (IOC) and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177356.


IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 182714.


IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566.


IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174739.


IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979.


IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178965.


IBM Business Process Manager 8.5 8.6 and IBM Business Automation Workflow 18.0 19.0 and 20.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186841.


IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459.


In CSS Validator less than or equal to commit 54d68a1 there is a cross-site scripting vulnerability in handling URIs. A user would have to click on a specifically crafted validator link to trigger it. This has been patched in commit e5c09a9.


IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186426.


IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175489.


IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186095.


IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176670.


IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189441.


IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174342.


IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190036.


IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174269.


IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435.


IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 183046.


IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.


IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182434.


IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187190.


IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175121.


IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 175841.


IBM DOORS Next Generation (DNG/RRC) 6.0.2 6.0.6 6.0.6.1 and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176141.


IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186424.


HCL

BigFix

WebUI

is

vulnerable

to

stored

cross-site

scripting

(XSS)

within

the

Apps->Software

module.

An

attacker

can

use

XSS

to

send

a

malicious

script

to

an

unsuspecting

user.

This

affects

all

versions

prior

to

latest

releases

as

specified

in


In Dijit before versions 1.11.11 and greater than or equal to 1.12.0 and less than 1.12.9 and greater than or equal to 1.13.0 and less than 1.13.8 and greater than or equal to 1.14.0 and less than 1.14.7 and greater than or equal to 1.15.0 and less than 1.15.4 and greater than or equal to 1.16.0 and less than 1.16.3 there is a cross-site scripting vulnerability in the Editor's LinkDialog plugin. This has been fixed in 1.11.11 1.12.9 1.13.8 1.14.7 1.15.4 1.16.3.


IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183314.


IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188055.


IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122.


IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191390.


IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186235.


In Sanitize (RubyGem sanitize) greater than or equal to 3.0.0 and less than 5.2.1 there is a cross-site scripting vulnerability. When HTML is sanitized using Sanitize's \relaxed\ config or a custom config that allows certain elements some content in a math or svg element may not be sanitized correctly even if math and svg are not in the allowlist. You are likely to be vulnerable to this issue if you use Sanitize's relaxed config or a custom config that allows one or more of the following HTML elements: iframe math noembed noframes noscript plaintext script style svg xmp. Using carefully crafted input an attacker may be able to sneak arbitrary HTML through Sanitize potentially resulting in XSS (cross-site scripting) or other undesired behavior when that HTML is rendered in a browser. This has been fixed in 5.2.1.


IBM Jazz Reporting Service 6.0.6 6.0.6.1 7.0 and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187731.


IBM Jazz Reporting Service 6.0.2 6.0.6 6.0.6.1 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.


IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182435.


IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187189.


IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188600.


IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189839.


IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698.


IBM InfoSphere Information Server 11.3 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176475.


IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174907.


IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 185717.


HCL Connections v5.5 v6.0 and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.


IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174738.


HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.


The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5 and from 8.6.0 before 8.8.2 and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a mixed multipart content type.


IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182906.


IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742.


IBM Jazz Reporting Service 6.0.6.1 7.0 7.0.1 and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191751.


IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460.


IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186427.


IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179359.


IBM Business Automation Workflow 18.0 19.0 and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183611.


The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and prior. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.


IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186094.


IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188127.


IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187187.


IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186281.


IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181227.


IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188737.


IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178762.


IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183039.


IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179160.


IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790.


IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request a remote attacker could exploit this vulnerability to inject HTTP HOST header which will allow the attacker to conduct various attacks against the vulnerable system including cross-site scripting cache poisoning or session hijacking. IBM X-Force ID: 187194.


IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191274.


IBM Business Process Manager 8.5 8.6 and IBM Business Automation Workflow 18.0 19.0 and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182371.


IBM Security Key Lifecycle Manager 3.0.1 and 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190289.


IBM InfoSphere Information Server 11.3 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179265.


IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188595.


IBM Intelligent Operations Center for Emergency Management Intelligent Operations Center (IOC) and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177355.


In Wiki.js before 2.4.107 there is a stored cross-site scripting through template injection. This vulnerability exists due to an insecure validation mechanism intended to insert v-pre tags into rendered HTML elements which contain curly-braces. By creating a crafted wiki page a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attacker to execute malicious JavaScript when the page is viewed by other users. This has been patched in 2.4.107.


IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174909.


IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0 19.0 and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188907.


IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192914


IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191753.