In System Management Module (SMM) versions prior to 1.06 the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags possibly opening a path for cross-site scripting.


Multiple unspecified vulnerabilities in Epiware before 4.7.5 have unknown impact and attack vectors possibly related to cross-site scripting (XSS) and other unspecified issues.


Multiple unspecified vulnerabilities in MaklerPlus before 1.2 have unknown impact and attack vectors possibly relating to cross-site scripting (XSS) in the slogan parameter in main.tpl or information leaks in error messages.


Multiple unspecified vulnerabilities in SPIP before 1.9.2.o 2.0.x before 2.0.18 and 2.1.x before 2.1.13 have unknown impact and attack vectors that are not related to cross-site scripting (XSS) different vulnerabilities than CVE-2012-2151.


Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors probably related to cross-site scripting (XSS) and WorldClient DLL 10.0.1 a different vulnerability than CVE-2008-6893.


Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to \unescaped output \ possibly cross-site scripting (XSS) in the (1) object browser and (2) contact view.


Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors some of which may be related to cross-site scripting (XSS).


HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php.


zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at /php/ajax.php.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic_view.php via the `activepath` `keyword` `tag` `fmdo=x&filename` `CKEditor` and `CKEditorFuncNum` parameters.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the `filename` `mid` `userid` and `templet' parameters.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_main.php via the `activepath` `keyword` `tag` `fmdo=x&filename` `CKEditor` and `CKEditorFuncNum` parameters.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `filename` `mid` `userid` and `templet' parameters.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `activepath` `keyword` `tag` `fmdo=x&filename` `CKEditor` and `CKEditorFuncNum` parameters.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychannel_edit.php via the `filename` `mid` `userid` and `templet' parameters.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_media.php via the `activepath` `keyword` `tag` `fmdo=x&filename` `CKEditor` and `CKEditorFuncNum` parameters.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sys_admin_user_edit.php via the `filename` `mid` `userid` and `templet' parameters.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_main.php via the `activepath` `keyword` `tag` `fmdo=x&filename` `CKEditor` and `CKEditorFuncNum` parameters.


DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtml_homepage.php via the `filename` `mid` `userid` and `templet' parameters.


The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim into clicking a malicious link.


Before version 4.8.2 WordPress allowed Cross-Site scripting in the plugin editor via a crafted plugin name.


Before version 4.8.2 WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL.


Before version 4.8.2 WordPress was vulnerable to cross-site scripting in oEmbed discovery.


Before version 4.8.2 WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name.


Before version 4.8.2 WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor.


All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.


Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.


Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.


Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS).


A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link.


Unspecified vulnerability in the Boost module before 4.7.x-1.0 and 5.x before 5.x-1.0 for Drupal allows remote attackers to create or overwrite arbitrary files and conduct cross-site scripting attacks (XSS) via unspecified vectors.


Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit (GWT) before 1.4.61 has unknown impact and attack vectors possibly related to cross-site scripting (XSS).


A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.


Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via img tags possibly cross-site scripting (XSS).


A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated user web interface.


A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).


A vulnerability in the authenticated user web interface of Pulse Connect Secure < 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) through the CGI file.


A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60 that did not properly sterilize packet contents and could allow an authenticated local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.


Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \\admin\\index.html#/system/tools.


It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.


IBM WebSphere Application Server ND 8.5 and 9.0 and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.


In WordPress before 4.7.5 a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files because the error message does not properly restrict presentation of the filename.


In WordPress before 4.7.5 a cross-site scripting (XSS) vulnerability related to the Customizer exists involving an invalid customization session.


MediaWiki 1.21.x 1.22.x before 1.22.14 and 1.23.x before 1.23.7 when $wgContentHandlerUseDB is enabled allows remote attackers to conduct cross-site scripting (XSS) attacks by setting the content model for a revision to JS.


A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7 13.5 before 13.5.5 and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other users via importing a malicious project


A vulnerability in the web-based interface of the Cisco SPA112 2-Port Phone Adapter could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against another user of the device. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected device. An attacker could exploit this vulnerability by inserting malicious code in one of the configuration fields. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A

vulnerability

in

the

web-based

management

interface

of

Cisco

Identity

Services

Engine

(ISE)

could

allow

an

authenticated

remote

attacker

to

conduct

a

cross-site

scripting

(XSS)

attack

against

a

user

of

the

web-based

interface.

The

vulnerability

is

due

to

insufficient

input

validation

of

some

parameters

passed

to

the

web-based

management

interface.

An

attacker

could

exploit

this

vulnerability

by

convincing

a

user

of

the

interface

to

click

a

specific

link.

A

successful

exploit

could

allow

the

attacker

to

execute

arbitrary

script

code

in

the

context

of

the

interface

or

allow

the

attacker

to

access

sensitive

browser-based

information.

For

information

about

fixed

software

releases

consult

the

Cisco

bug

ID

at

When

considering

software

upgrades

customers

are

advised

to

regularly

consult

the

advisories

for

Cisco

products

which

are

available

from

the

Cisco

Security

Advisories

and

Alerts

page

to

determine

exposure

and

a

complete

upgrade

solution.


A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. At the time of publication this vulnerability affected Cisco ISE running software releases prior to 2.4.0 Patch 9 and 2.6.0.


A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated remote attacker to perform cross-site scripting (XSS) attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient sanitization of user-supplied input delivered to the chat feed as part of an HTTP request. An attacker could exploit this vulnerability by persuading a user to follow a link to attacker-controlled content. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A vulnerability in the URL block page of Cisco Umbrella could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user in a network protected by Umbrella. The vulnerability is due to insufficient validation of input parameters passed to that page. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information. This vulnerability has been fixed in the current version of Cisco Umbrella. Cisco Umbrella is a cloud service.


Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Console) versions 4.1 4.2 4.3 allows an attacker to store a malicious payload within the description field of a user account. The payload is triggered when the mouse cursor is moved over the description field in the list when generating the little yellow informational pop up box resulting in Stored Cross Site Scripting Attack.


The input fields of the Apache Pluto \Chat Room\ demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigation: * Uninstall the ChatRoomDemo war file - or - * migrate to version 3.1.0 of the chat-room-demo war file


A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input aka 'Team Foundation Server Cross-site Scripting Vulnerability'.


A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.


Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View.


A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the service. The vulnerability exists because the Online Help web service of an affected device insufficiently validates user-supplied input. An attacker could exploit this vulnerability by persuading a user of the service to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected service or access sensitive browser-based information.This vulnerability affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running firmware releases prior to 1.4.2.22.


A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages aka 'Active Directory Federation Services XSS Vulnerability'.


A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input in the web-based management interface of the affected system. An attacker could exploit this vulnerability by persuading a user to access a report containing malicious content. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. Versions 6.2.3 6.3.0 and 6.4.0 are affected.


A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'.


Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1031 CVE-2019-1032 CVE-2019-1033.


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1031 CVE-2019-1033 CVE-2019-1036.


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft Office SharePoint XSS Vulnerability'.


A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Prime Network Registrar could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. This vulnerability has been fixed in software version 14.1(1i).


A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input that is processed by the web-based interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information. Cisco ISE software version 2.1 is affected.


A vulnerability in Cisco Industrial Network Director could allow an authenticated remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to conduct XSS attacks.


A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0743.


A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft Office SharePoint XSS Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0557 CVE-2019-0558.


A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in version 4.2. Privileges are required in order to exploit this vulnerability.


A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867 CVE-2019-0868 CVE-2019-0870 CVE-2019-0871.


A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866 CVE-2019-0868 CVE-2019-0870 CVE-2019-0871.

cross site scripting vulnerability
improper user input sanitization


A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0872.


A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input aka 'Team Foundation Server Cross-site Scripting Vulnerability'.


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1031 CVE-2019-1032 CVE-2019-1036.

cross site scripting vulnerability
improper web request sanitization


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831.


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830.


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft Office SharePoint XSS Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0556 CVE-2019-0558.


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft Office SharePoint XSS Vulnerability'.


The Fiori Launchpad of SAP BusinessObjects before versions 4.2 and 4.3 does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.

cross site scripting vulnerability
insufficient user input encoding


ABAP Server and ABAP Platform (SAP Basis) versions 7.31 7.4 7.5 do not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.


SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31 7.46 7.47 7.48 8.0 8.01) does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.


SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.


A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) software could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information.

cross site scripting vulnerability
weak authentication management


A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866 CVE-2019-0867 CVE-2019-0868 CVE-2019-0871.

cross site scripting
improper user sanitization


A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866 CVE-2019-0867 CVE-2019-0870 CVE-2019-0871.


A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.


A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize user input and could be exploited to perform Reflected Cross Site Scripting (XSS). The mitigation for this vulnerability is to upgrade to the latest version of Roller which is now Roller 5.2.3.


A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input aka \Team Foundation Server Cross-site Scripting Vulnerability.\ This affects Team.


A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft Office SharePoint XSS Vulnerability.\ This affects Microsoft SharePoint Server Microsoft SharePoint Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556 CVE-2019-0557.

cross site scripting
improper web request sanitization


A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of a user-supplied value. An attacker could exploit this vulnerability by convincing a user to click a specific link. A successful exploit could allow the attacker to submit arbitrary requests to the affected system via a web browser with the privileges of the user.

cross site scripting
insufficient input validation
xss


SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) before versions 4.2 and 4.3 does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name which can be executed later by the victim resulting in Stored Cross-Site Scripting.

cross site scripting
insufficient user input encoding


SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) before versions 4.2 and 4.3 does not sufficiently encode user-controlled inputs and allows execution of scripts in the export dialog box of the report name resulting in reflected Cross-Site Scripting.


SAP Commerce (previously known as SAP Hybris Commerce) before version 6.7 does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.


SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) before version 4.2 does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background image resulting in Stored Cross-Site Scripting.


Java Proxy Runtime of SAP NetWeaver Process Integration versions 7.10 7.11 7.30 7.31 7.40 7.50 does not sufficiently encode user-controlled inputs and allows an attacker to execute malicious scripts in the url thereby resulting in Reflected Cross-Site Scripting (XSS) vulnerability


A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrative actions on the Junos device. Successful exploitation requires a Junos administrator to first perform certain diagnostic actions on J-Web. This issue affects: Juniper Networks Junos OS 12.1X46 versions prior to 12.1X46-D86; 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1F6-S13 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D171 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D497 15.1X53-D69; 16.1 versions prior to 16.1R7-S5; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8 17.2R2-S7 17.2R3-S1; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R1-S7 17.4R2-S4 17.4R3; 18.1 versions prior to 18.1R3-S5; 18.2 versions prior to 18.2R1-S5 18.2R2-S3 18.2R3; 18.3 versions prior to 18.3R1-S3 18.3R2 18.3R3; 18.4 versions prior to 18.4R1-S2 18.4R2.

cross site scripting
weak authentication management


A vulnerability in the Security Assertion Markup Language (SAML) single sign-on (SSO) interface of Cisco Unity Connection could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. Version 12.5 is affected.


A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance (PCA) could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to the insufficient validation of data supplied by external devices to the web-based management interface of an affected PCA device. An attacker in control of devices integrated with an affected PCA device could exploit this vulnerability by using crafted data in certain fields of the controlled devices. A successful exploit could allow the attacker to execute arbitrary script code in the context of the PCA web-based management interface or allow the attacker to access sensitive browser-based information.


A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against another user of the service. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected software. An attacker could exploit this vulnerability by sending an email with a malicious payload to another user. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. This vulnerability affects software versions 5.3.4.x.


Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the WebVPN portal of an affected device. The vulnerabilities exist because the software insufficiently validates user-supplied input on an affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. An attacker would need administrator privileges on the device to exploit these vulnerabilities.


The affected product is vulnerable to reflected cross-site scripting which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W (all versions).

cross site scripting
arbitrary code execution


The affected product is vulnerable to stored cross-site scripting which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions).


cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting (XSS) vulnerability.


A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page.


A

cross-site

scripting

vulnerability

was

discovered

in

the

Comments

parameter

in

Textpattern

CMS

which

allows

remote

attackers

to

execute

arbitrary

code

via

a

crafted

payload

entered

into

the

URL

field.

The

vulnerability

is

triggered

by

users

visiting


A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields.


A vulnerability has been identified in Polarion ALM (All versions < V21 R2 P2) Polarion WebClient for SVN (All versions). A cross-site scripting is present due to improper neutralization of data sent to the web page through the SVN WebClient in the affected product. An attacker could exploit this to execute arbitrary code and extract sensitive information by sending a specially crafted link to users with administrator privileges.


A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field which allows malicious users to execute arbitrary code via a crafted http code in a .json file.


Under certain conditions SAP Contact Center - version 700 does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability when creating a new email and to execute arbitrary code on the victim's browser.


Under certain conditions SAP Contact Center - version 700 does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability through phishing and to execute arbitrary code on the victim's browser.


Under certain conditions SAP Contact Center - version 700 does not sufficiently encode user-controlled inputs and persists in them. This allows an attacker to exploit a Stored Cross-Site Scripting (XSS) vulnerability when a user browses through the employee directory and to execute arbitrary code on the victim's browser. Due to the usage of ActiveX in the application the attacker can further execute operating system level commands.


A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input that is processed by the web-based management interface. An attacker could exploit this vulnerability by adding malicious code to the configuration by using the web-based management interface. A successful exploit could allow the attacker to execute arbitrary code in the context of the interface or access sensitive browser-based information.


Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes which are not properly removed and are rendered in the local zone.


Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_mois and mb_ligness and the debug GET parameter to export.php which allows malicious users to execute arbitrary code.


Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects which allows remote attackers to spoof the Address Bar conduct cross-site scripting (XSS) attacks and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context.


Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system execute arbitrary code on the underlying host operating system install applications without being authenticated or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities see the Details section of this advisory.


A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input by the affected software. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code in the context of the affected system. Cisco Bug IDs: CSCvc38983.


A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated remote attacker to perform a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by persuading an authenticated user of the web-based GUI on an affected system to follow a malicious link. A successful exploit could allow the attacker to execute arbitrary code in the context of the web-based GUI on the affected system. Cisco Bug IDs: CSCvd14587.


Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b 8.1.2 and 8.2.0 could allow remote attackers to execute arbitrary code or access sensitive browser-based information.


Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.


E-Business

Designer

(eBD)

and

earlier

allows

remote

attackers

to

upload

or

modify

arbitrary

files

and

execute

arbitrary

code

via

a

direct

request

to

or

NOTE:

this

can

also

be

used

for

cross-site

scripting

(XSS)

attacks

by

uploading

cascading

style

sheet

(.CSS)

files.


Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description which is executed when the certificate is viewed.


Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML by uploading an XML file with the xhtml extension which is rendered inline as script. NOTE: this can be leveraged with CVE-2012-2244 to execute arbitrary code without authentication as demonstrated by modifying the clamav path.


Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site.


Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site related to a \hidden keyboard navigation\ issue.


Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism >=v1.1.0 that use the _Previewers_ plugin (>=v1.10.0) or the _Previewer: Easing_ plugin (v1.1.0 to v1.9.0). This problem is fixed in version 1.21.0. To workaround the issue without upgrading disable the easing preview on all impacted code blocks. You need Prism v1.10.0 or newer to apply this workaround.


In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions the affected product is vulnerable to a cross-site scripting attack which may allow an attacker to remotely execute arbitrary code.


An issue was discovered in Moxa ioLogik E1210 firmware Version V2.4 and prior ioLogik E1211 firmware Version V2.3 and prior ioLogik E1212 firmware Version V2.4 and prior ioLogik E1213 firmware Version V2.5 and prior ioLogik E1214 firmware Version V2.4 and prior ioLogik E1240 firmware Version V2.3 and prior ioLogik E1241 firmware Version V2.4 and prior ioLogik E1242 firmware Version V2.4 and prior ioLogik E1260 firmware Version V2.4 and prior ioLogik E1262 firmware Version V2.4 and prior ioLogik E2210 firmware versions prior to V3.13 ioLogik E2212 firmware versions prior to V3.14 ioLogik E2214 firmware versions prior to V3.12 ioLogik E2240 firmware versions prior to V3.12 ioLogik E2242 firmware versions prior to V3.12 ioLogik E2260 firmware versions prior to V3.13 and ioLogik E2262 firmware versions prior to V3.12. The web application fails to sanitize user input which may allow an attacker to inject script or execute arbitrary code (CROSS-SITE SCRIPTING).


Limbo CMS 1.0.4.2 and earlier with register_globals off does not protect the $_SERVER variable from external modification which allows remote attackers to use the _SERVERREMOTE_ADDR parameter to (1) conduct cross-site scripting (XSS) attacks in the stats module or (2) execute arbitrary code via an eval injection attack in the wrapper option in index2.php.


wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2) conduct cross-site scripting attacks via certain parameters (possibly \dict\) to the wordtrans.php script.


The

MyAsUtil

ActiveX

control

in

in

McAfee

SaaS

Endpoint

Protection

and

earlier

allows

remote

attackers

to

bypass

the

MyASUtil.SecureObjectFactory.CreateSecureObject

domain

execution

policy

using

a

cross-site

scripting

(XSS)

attack

execute

arbitrary

code

using

the

MyASUtil.InstallInfo.RunUserProgram

function

and

possibly

conduct

other

unspecified

attacks.


A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf which could let a remote malicious user execute arbitrary code.


A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4 3.1.8 and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes workorder items and FAQ articles which could let a remote malicious user execute arbitrary code.


A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2 which allows malicious users to execute arbitrary code.


Cross-site scripting (XSS) vulnerability in the National Rail Enquiries Live Departure Boards gadget before 1.1 allows remote National Rail Enquiries servers or man-in-the-middle attackers to inject arbitrary web script or HTML and execute arbitrary code via a response body as demonstrated by a SCRIPT element that references a vbscript: URI.

cross site scripting
arbitrary code execution
man in the middle


Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities see the Details section of this advisory.

cross site scripting
arbitrary command execution


Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction.


Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local \HTML-embedded resource files\ in the Microsoft Management Console (MMC) library which allows remote authenticated users to execute arbitrary commands aka \MMC Redirect Cross-Site Scripting Vulnerability.\


The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all Teams users in the online service on or around October 2020.


Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.


Ichitaro 2005 through 2007 and possibly related products allows remote attackers to have an unknown impact via unspecified vectors in a document distributed through e-mail or a web site possibly due to a buffer overflow or cross-site scripting (XSS).


An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') weakness in J-web of Juniper Networks Junos OS leads to buffer overflows segment faults or other impacts which allows an attacker to modify the integrity of the device and exfiltration information from the device without authentication. The weakness can be exploited to facilitate cross-site scripting (XSS) cookie manipulation (modifying session cookies stealing cookies) and more. This weakness can also be exploited by directing a user to a seemingly legitimate link from the affected site. The attacker requires no special access or permissions to the device to carry out such attacks. This issue affects: Juniper Networks Junos OS: 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4 18.3R3-S3; 18.4 versions prior to 18.4R2-S5 18.4R3-S3; 19.1 versions prior to 19.1R2-S2 19.1R3-S2; 19.2 versions prior to 19.2R1-S5 19.2R2; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R1-S3 19.4R2 19.4R3; 20.1 versions prior to 20.1R1-S2 20.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 18.1R1.


Allons_voter 1.0 allows remote attackers to bypass authentication and access certain administrative functionality via a direct request for (1) admin_ajouter.php or (2) admin_supprimer.php. NOTE: this could be leveraged to conduct cross-site scripting (XSS) attacks.

cross site scripting
bypass authentication


yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting (XSS) vulnerability in sidebar and table data that can result in Database fields aren't properly sanitized and allow code injection (Cross-Site Scripting). This attack appears to be exploitable via the payload needs to be stored in the database and the victim must see the db value in question.


A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1) EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1) and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could cause code injection when importing a CSV file or changing station parameters.


A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.


Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.


EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection


Cross-site scripting (XSS) vulnerability in Softcomplex PHP Event Calendar 1.5 allows remote authenticated users to inject arbitrary web script or HTML and corrupt data via the (1) username and (2) password parameters which are not sanitized before being written to users.php. NOTE: while this issue was originally reported as XSS the primary issue might be direct static code injection with resultant XSS.


WooCommerce

before

when

it

handles

CSV

imports

of

products

has

a

cross-site

request

forgery

(CSRF)

issue

with

resultant

stored

cross-site

scripting

(XSS)

via


The web server component of TIBCO Software Inc.'s TIBCO LogLogic Enterprise Virtual Appliance and TIBCO LogLogic Log Management Intelligence contains multiple vulnerabilities that theoretically allow persistent and reflected cross-site scripting (XSS) attacks as well as cross-site request forgery (CSRF) attacks. This issue affects: TIBCO Software Inc. TIBCO LogLogic Enterprise Virtual Appliance version 6.2.1 and prior versions. TIBCO Software Inc. TIBCO LogLogic Log Management Intelligence 6.2.1. TIBCO LogLogic LX825 Appliance 0.0.004 TIBCO LogLogic LX1025 Appliance 0.0.004 TIBCO LogLogic LX4025 Appliance 0.0.004 TIBCO LogLogic MX3025 Appliance 0.0.004 TIBCO LogLogic MX4025 Appliance 0.0.004 TIBCO LogLogic ST1025 Appliance 0.0.004 TIBCO LogLogic ST2025-SAN Appliance 0.0.004 and TIBCO LogLogic ST4025 Appliance 0.0.004 using TIBCO LogLogic Log Management Intelligence versions 6.2.1 and below. TIBCO LogLogic LX1035 Appliance 0.0.005 TIBCO LogLogic LX1025R1 Appliance 0.0.004 TIBCO LogLogic LX1025R2 Appliance 0.0.004 TIBCO LogLogic LX4025R1 Appliance 0.0.004 TIBCO LogLogic LX4025R2 Appliance 0.0.004 TIBCO LogLogic LX4035 Appliance 0.0.005 TIBCO LogLogic ST2025-SANR1 Appliance 0.0.004 TIBCO LogLogic ST2025-SANR2 Appliance 0.0.004 TIBCO LogLogic ST2035-SAN Appliance 0.0.005 TIBCO LogLogic ST4025R1 Appliance 0.0.004 TIBCO LogLogic ST4025R2 Appliance 0.0.004 and TIBCO LogLogic ST4035 Appliance 0.0.005 using TIBCO LogLogic Log Management Intelligence versions 6.2.1 and below.


The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric TIBCO ActiveMatrix Policy Director TIBCO ActiveMatrix Service Bus TIBCO ActiveMatrix Service Grid TIBCO Silver Fabric Enabler for ActiveMatrix BPM and TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid contains multiple vulnerabilities that may allow for cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO ActiveMatrix BPM: versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric: versions up to and including 4.2.0 TIBCO ActiveMatrix Policy Director: versions up to and including 1.1.0 TIBCO ActiveMatrix Service Bus: versions up to and including 3.3.0 TIBCO ActiveMatrix Service Grid: versions up to and including 3.3.1 TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versions up to and including 1.4.1 and TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid: versions up to and including 1.3.1.


Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall) before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING. NOTE: this can be used to bypass the cross-site request forgery (CSRF) protection mechanism by setting the Referer.


Cross-site request forgery (CSRF) vulnerability in askapache-firefox-adsense.php in the AskApache Firefox Adsense plugin 3.0 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the aafireadcode parameter to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new administrator via the AddUser action or (2) conduct cross-site scripting (XSS) attacks as demonstrated by CVE-2013-4888.


Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that (1) create or modify products or conduct cross-site scripting (XSS) attacks via the (2) Product name or (3) Price description field in a product save action via a request to wp-admin/admin.php.


Multiple

cross-site

request

forgery

(CSRF)

vulnerabilities

in

the

IndiaNIC

Testimonial

plugin

for

WordPress

allow

remote

attackers

to

hijack

the

authentication

of

administrators

for

requests

that

add

a

testimonial

via

an

action;

add

a

listing

template

via

an

action;

add

a

widget

template

via

an

action;

insert

cross-site

scripting

(XSS)

sequences

via

the

description

tags

or

title

or

parameter

to

wp-admin/admin-ajax.php.


Cross-site request forgery (CSRF) vulnerability in the portlet subsystem in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 and 7.0 before 7.0.0.27 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting (XSS) attacks via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 7.0 before 7.0.0.31 8.0 before 8.0.0.7 and 8.5 before 8.5.5.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) modify buttons or (3) insert cross-site scripting (XSS) sequences.


The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to stored Cross-Site Scripting and limited Privilege Escalation due to a missing nonce check in the access control function for administrative AJAX actions


A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allows remote attackers to execute JavaScript code in the client's browser by storing said code as a Missing Data Code value. This can then be leveraged to execute a Cross-Site Request Forgery attack to escalate privileges to administrator.


Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery (CSRF) vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF as the above pages are vulnerable to cross-site scripting (XSS).


The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings which allows attackers to make a logged in admin update the settings via a Cross-Site Request Forgery attack. This could lead to Cross-Site Scripting issues by either changing the URL of the JavaScript library being used or using malicious attributions which will be executed in all page with an embed map from the plugin


Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileged actions as administrators as demonstrated using the delete action in wp-admin/post.php. NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks and steal cookies via the post parameter.


Multiple cross-site request forgery (CSRF) vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) pwgrandom_title or (2) pwgrandom_category parameter in the pwgrandom page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Wp Unique Article Header Image plugin 1.0 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) gt_default_header or (2) gt_homepage_header parameter in the wp-unique-header.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the iTwitter plugin 0.04 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) itex_t_twitter_username or (2) itex_t_twitter_userpass parameter in the iTwitter.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the wpCommentTwit plugin 0.5 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) username or (2) password parameter in the wpCommentTwit.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Our Team Showcase (our-team-enhanced) plugin before 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or (2) conduct cross-site scripting (XSS) attacks via the sc_our_team_member_count parameter in the sc_team_settings page to wp-admin/edit.php.


Cross-site request forgery (CSRF) vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the mashtlb_twitter_username parameter in the twitter-liveblog.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin user name or (2) conduct cross-site scripting (XSS) attacks via the sysUserName parameter in a save action to adminpasswd.cgi or (3) change the admin user password via the sysPassword parameter in a save action to adminpasswd.cgi.


Multiple cross-site request forgery (CSRF) vulnerabilities in the yURL ReTwitt plugin 1.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) yurl_login or (2) yurl_anchor parameter in the yurl page to wp-admin/options-general.php.


Cross-site request forgery (CSRF) vulnerability in the TweetScribe plugin 1.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the tweetscribe_username parameter in a save action in the tweetscribe.php page to wp-admin/options-general.php.


Cross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in MediaWiki before 1.19.22 1.20.x through 1.22.x before 1.22.14 and 1.23.x before 1.23.7 when $wgRawHTML is set to true allows remote attackers to hijack the authentication of users with edit permissions for requests that cross-site scripting (XSS) attacks via the wpInput parameter which is not properly handled in the preview.


Cross-site request forgery (CSRF) vulnerability in the twitterDash plugin 2.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the username_twitterDash parameter in the twitterDash.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the gSlideShow plugin 0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) rss (2) display_time or (3) transistion_time parameter in the gslideshow.php page to wp-admin/options-general.php.


Cross-site request forgery (CSRF) vulnerability in the WP Limit Posts Automatically plugin 0.7 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the lpa_post_letters parameter in the wp-limit-posts-automatically.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Simplelife plugin 1.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) simplehoverback (2) simplehovertext (3) flickrback or (4) simple_flimit parameter in the simplelife.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Mikiurl Wordpress Eklentisi plugin 2.0 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) twitter_kullanici or (2) twitter_sifre parameter in a kaydet action in the mikiurl.php page to wp-admin/options-general.php.


Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the addons_title parameter in the CMDM_admin_settings page to wp-admin/admin.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the SPNbabble plugin 1.4.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) username or (2) password parameter in the spnbabble.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Facebook Like Box (cardoza-facebook-like-box) plugin before 2.8.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) frm_title (3) frm_url (4) frm_border_color (5) frm_width or (6) frm_height parameter in the slug_for_fb_like_box page to wp-admin/admin.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the IP Ban (simple-ip-ban) plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) ip_list (2) user_agent_list or (3) redirect_url parameter in the simple-ip-ban page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Sticky Footer plugin before 1.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) simple_sf_width or (3) simple_sf_style parameter in the simple-simple-sticky-footer page to wp-admin/themes.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Post to Twitter plugin 0.7 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) idptt_twitter_username or (2) idptt_tweet_prefix parameter to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the DandyID Services plugin 1.5.9 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) email_address or (2) sidebarTitle parameter in the dandyid-services.php page to wp-admin/options-general.php.


Cross-site request forgery (CSRF) vulnerability in the twimp-wp plugin for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the message_format parameter in the twimp-wp.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Sliding Social Icons plugin 1.61 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or (2) conduct cross-site scripting (XSS) attacks via the sc_social_slider_margin parameter in a wpbs_save_settings action in the wpbs_panel page to wp-admin/admin.php.


Cross-site request forgery (CSRF) vulnerability in the PictoBrowser (pictobrowser-gallery) plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the pictoBrowserFlickrUser parameter in the options-page.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the WP-ViperGB plugin before 1.3.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) vgb_page or (3) vgb_items_per_pg parameter in the wp-vipergb page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) user or (2) password parameter in the bird-feeder page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleFlickr plugin 3.0.3 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) simpleflickr_width (2) simpleflickr_bgcolor or (3) simpleflickr_xmldatapath parameter in the simpleFlickr.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the O2Tweet plugin 0.0.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) o2t_username or (2) o2t_tags parameter to wp-admin/options-general.php.


Multiple

cross-site

request

forgery

(CSRF)

vulnerabilities

in

Oxwall

(build

and

and

SkaDate

Lite

(build

allow

remote

attackers

to

hijack

the

authentication

of

administrators

for

requests

that

conduct

cross-site

scripting

(XSS)

attacks

or

possibly

have

other

unspecified

impact

via

the

label

parameter

to

admin/users/roles/

in

an

AddAccountType

action

or

parameter

in

an

addQuestion

action

to

admin/questions/ajax-responder/

or

or

restrictedUsername

parameter

to

admin/restricted-usernames.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) ll__optimage2_url or (3) ll__optimage3_url parameter in a ll_save_settings action to wp-admin/admin-ajax.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Timed Popup (wp-timed-popup) plugin 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or (2) conduct cross-site scripting (XSS) attacks via the sc_popup_subtitle parameter in the wp-popup.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site scripting (XSS) attacks via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/load_flv.js.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks via the i18n1name parameter in a pjActionCreate action to the pjAdminServices controller or (2) add an administrator via a pjActionCreate action to the pjAdminUsers controller.


Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change the username and password of the administrator via an update action to the AdminOptions controller or conduct cross-site scripting (XSS) attacks via the (2) event_title parameter in a create action to the AdminEvents controller or (3) category_title parameter in a create action to the AdminCategories controller.


Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the quickppr_redirectsrequest parameter in the redirect-updates page to wp-admin/admin.php.


Cross-site

request

forgery

(CSRF)

vulnerability

in

the

Subscribe

To

Comments

Reloaded

plugin

before

for

WordPress

allows

remote

attackers

to

hijack

the

authentication

of

administrators

for

requests

that

conduct

cross-site

scripting

(XSS)

attacks

via

a

request

to

the

page

to

wp-admin/admin.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct (1) SQL injection attacks via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php or (2) cross-site scripting (XSS) attacks via unspecified vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authentication of users for requests that (1) conduct cross-site scripting (XSS) attacks (2) modify files or (3) rename files via unspecified vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) ssba_share_text parameter in a save action to wp-admin/options-general.php which is not properly handled in the homepage and unspecified vectors related to (2) Pages (3) Posts (4) Category/Archive pages or (5) post Excerpts.


Multiple cross-site request forgery (CSRF) vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that (1) add Super users via a request to admin/user_create.php or conduct cross-site scripting (XSS) attacks via the (2) email or (3) subject parameter in contact_form.ext.php to admin/extensions.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) disqus_replace (2) disqus_public_key or (3) disqus_secret_key parameter to wp-admin/edit-comments.php in manage.php or that (4) reset or (5) delete plugin options via the reset parameter to wp-admin/edit-comments.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new super user account via a request to admin/users/add (2) insert cross-site scripting (XSS) sequences via the api_key_label parameter to admin/users/api-keys/1 or (3) disable file validation via a request to admin/settings/edit-security.


Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote management via a request to remote_management.php (2) add a port forwarding rule via a request to port_forwarding_add.php (3) change the wireless network to open via a request to wireless_network_configuration_edit.php or (4) conduct cross-site scripting (XSS) attacks via the keyword parameter to managed_sites_add_keyword.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Pods plugin before 2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks via the toggled parameter in a toggle action in the pods-components page to wp-admin/admin.php (2) delete a pod in a delete action in the pods page to wp-admin/admin.php (3) reset pod settings and data via the pods_reset parameter in the pod-settings page to wp-admin/admin.php (4) deactivate and reset pod data via the pods_reset_deactivate parameter in the pod-settings page to wp-admin/admin.php (5) delete the admin role via the id parameter in a delete action in the pods-component-roles-and-capabilities page to wp-admin/admin.php or (6) enable \roles and capabilities\ in a toggle action in the pods-components page to wp-admin/admin.php.


Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the custom_style_afo parameter on the login_widget_afo page to wp-admin/options-general.php.


Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 6.0 and 7.0 allows remote attackers to hijack the authentication of users for requests that can cause cross-site scripting attacks web cache poisoning or other unspecified impacts via unknown vectors.


Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3 4.1.x before 4.1.14.4 and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML and consequently conduct a cross-site request forgery (CSRF) attack to create a root account via a crafted URL related to js/ajax.js.


Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198 1.197 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks or (2) change unspecified settings.


Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site request forgery (CSRF) attack involving the cmd and argv parameters to cmd.msc.


Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the Login-As feature or (2) when the global search feature is enabled unspecified global search forms in the Global Search Engine. NOTE: vector 1 might be resultant from a cross-site request forgery (CSRF) vulnerability.


Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) linkname (2) url or (3) title parameter in an add action to linksmanage.php.


The GridServer Broker and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS). In addition an authenticated user could be a victim of a cross-site request forgery (CSRF) attack. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.


Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability includes the theoretical disclosure of sensitive information. Affects TIBCO JasperReports Server (versions 6.1.1 and below 6.2.0 6.2.1 and 6.3.0) TIBCO JasperReports Server Community Edition (versions 6.3.0 and below) TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below) TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.2.0 and below) and TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.2.0 and below).


Some URLs provided by Jenkins global-build-stats plugin version 1.4 and earlier returned a JSON response that contained request parameters. These responses had the Content Type: text/html so could have been interpreted as HTML by clients resulting in a potential reflected cross-site scripting vulnerability. Additionally some URLs provided by global-build-stats plugin that modify data did not require POST requests to be sent resulting in a potential cross-site request forgery vulnerability.


Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting (XSS) attacks or possibly have unspecified other impact via the name parameter to playerSettings.view.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) create a field (2) update a field (3) delete a field (4) create a form (5) update a form (6) delete a form (7) create a template (8) update a template (9) delete a template or (10) conduct cross-site scripting (XSS) attacks via a crafted request to the cfg_forms page in wp-admin/admin.php.


Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability but this may be inaccurate.


Multiple cross-site request forgery (CSRF) vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of administrators for requests that (1) create a post via a new_simple action to admin.php or (2) conduct cross-site scripting (XSS) attacks via the content parameter in a new_simple action to admin.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall before 1.8 allow remote attackers to hijack the authentication of administrators for requests that (1) put the website under maintenance via the maintenance_enable parameter or (2) conduct cross-site scripting (XSS) attacks via the maintenance_text parameter to admin/pages/maintenance.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add users (2) delete posts or (3) modify PHP files via unspecified vectors or (4) conduct cross-site scripting (XSS) attacks via the po_logo parameter in the privateonly.php page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in Koha 3.14.x before 3.14.16 3.16.x before 3.16.12 3.18.x before 3.18.08 and 3.20.x before 3.20.1 allow remote attackers to (1) hijack the authentication of administrators for requests that create a user via a request to members/memberentry.pl or (2) give a user superlibrarian permission via a request to members/member-flags.pl or (3) hijack the authentication of arbitrary users for requests that conduct cross-site scripting (XSS) attacks via the addshelf parameter to opac-shelves.pl.


Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the iframe_url parameter in an Update Page action in the conformconf page to wp-admin/options-general.php.


Cross-site request forgery (CSRF) vulnerability in the WP Smiley plugin 1.4.1 for WordPress allows remote attackers to hijack the authentication of editors for requests that conduct cross-site scripting (XSS) attacks via the s4w-more parameter to the smilies4wp.php page to wp-admin/options-general.php.


Cross-site request forgery (CSRF) vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the banner_effect_email parameter in the BannerEffectOptions page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to hijack the authentication of administrators for requests that conduct (1) cross-site scripting (XSS) (2) SQL injection or (3) unrestricted file upload attacks.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Redirection Page plugin 1.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) source or (3) redir parameter in an add action in the redirection-page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Mobile Domain plugin 1.5.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) domain (3) text (4) font (5) fontcolor (6) color or (7) padding parameter in an add-domain action in the mobile-domain page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Image Metadata Cruncher plugin for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) image_metadata_cruncheralt or (2) image_metadata_crunchercaption parameter in an update action in the image_metadata_cruncher_title page to wp-admin/options.php or (3) custom image meta tag to the image metadata cruncher page.


Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of administrators for requests that create an (1) SMTP domain or a (2) user via a request to /FrontController; or conduct cross-site scripting (XSS) attacks via the (3) domainname parameter to /FrontController when creating a new SMTP domain configuration; the (4) txtRecipient parameter to /FrontController when creating a new forwarder; the (5) popFetchServer (6) popFetchUser or (7) popFetchRecipient parameter to /FrontController when creating a new POP3 Fetcher account; or the (8) Smtp HELO domain in the Advanced Server Configuration.


Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the image_file parameter in an edit action in the cnss_social_icon_add page to wp-admin/admin.php.


Multiple

cross-site

request

forgery

(CSRF)

vulnerabilities

in

the

CrossSlide

jQuery

(crossslide-jquery-plugin-for-wordpress)

plugin

for

WordPress

allow

remote

attackers

to

hijack

the

authentication

of

administrators

for

requests

that

change

plugin

settings

or

conduct

cross-site

scripting

(XSS)

attacks

via

the

or

parameter

in

the

page

to

wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Acobot Live Chat & Contact Form plugin 2.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or (2) conduct cross-site scripting (XSS) attacks via the acobot_token parameter in the acobot page to wp-admin/options-general.php.


Multiple cross-site request forgery (CSRF) vulnerabilities in the AB Google Map Travel (AB-MAP) plugin before 4.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) lat (Latitude) (2) long (Longitude) (3) map_width (4) map_height or (5) zoom (Map Zoom) parameter in the ab_map_options page to wp-admin/admin.php.


Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting which can be leveraged for a cross-site request forgery (CSRF) attack involving forced SQL execution by an admin.


Multiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting (XSS) sequences via the (1) address or (2) threadid parameters to operator/ban.php; or (3) geolinkparams (4) title or (5) chattitle parameters to operator/settings.php.


Multiple

cross-site

request

forgery

(CSRF)

and

cross-site

scripting

(XSS)

vulnerabilities

in

Axous

and

earlier

allow

remote

attackers

to

hijack

the

authentication

of

administrators

for

requests

that

add

an

administrator

account

via

an

addnew

action

to

or

conduct

cross-site

scripting

(XSS)

attacks

via

the

parameter

to

the

parameter

to

the

or

parameter

to

the

city

state

country

or

parameter

to

or

the

or

parameter

to


Cross-site

scripting

(XSS)

vulnerability

in

serendipity/serendipity_admin_image_selector.php

in

Serendipity

before

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

serendipitytextarea

parameter.

NOTE:

this

issue

might

be

resultant

from

cross-site

request

forgery

(CSRF).


Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via the (1) wl_reveal or (2) q parameters.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) change workflows or (2) insert cross-site scripting (XSS) sequences.


Multiple cross-site request forgery (CSRF) vulnerabilities in the DVS Custom Notification plugin 1.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change application settings or (2) conduct cross-site scripting (XSS) attacks.


Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create new FTP users via a CreateFTP action in the ftp_management module to the default URI (2) conduct cross-site scripting (XSS) attacks via the inFullname parameter in an UpdateAccountSettings action in the my_account module to zpanel/ or (3) conduct SQL injection attacks via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default URI.


Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CSRF) via a post subject.


In

CMS

through

and

through

it

has

been

discovered

that

the

backend

user

interface

and

install

tool

are

vulnerable

to

a

same-site

request

forgery.

A

backend

user

can

be

tricked

into

interacting

with

a

malicious

resource

an

attacker

previously

managed

to

upload

to

the

web

server.

Scripts

are

then

executed

with

the

privileges

of

the

victims'

user

session.

In

a

worst-case

scenario

new

admin

users

can

be

created

which

can

directly

be

used

by

an

attacker.

The

vulnerability

is

basically

a

cross-site

request

forgery

(CSRF)

triggered

by

a

cross-site

scripting

vulnerability

(XSS)

but

happens

on

the

same

target

host

thus

it's

actually

a

same-site

request

forgery.

Malicious

payload

such

as

HTML

containing

JavaScript

might

be

provided

by

either

an

authenticated

backend

user

or

by

a

non-authenticated

user

using

a

third

party

extension

e.g.

file

upload

in

a

contact

form

with

knowing

the

target

location.

To

be

successful

the

attacked

victim

requires

an

active

and

valid

backend

or

install

tool

user

session

at

the

time

of

the

attack.

This

has

been

fixed

in

and

The

deployment

of

additional

mitigation

techniques

is

suggested

as

described

below.

Sudo

Mode

Extension

This

extension

intercepts

modifications

to

security

relevant

database

tables

e.g.

those

storing

user

accounts

or

storages

of

the

file

abstraction

layer.

Modifications

need

to

confirmed

again

by

the

acting

user

providing

their

password

again.

This

technique

is

known

as

sudo

mode.

This

way

unintended

actions

happening

in

the

background

can

be

mitigated.

Content

Security

Policy

Content

Security

Policies

tell

(modern)

browsers

how

resources

served

a

particular

site

are

handled.

It

is

also

possible

to

disallow

script

executions

for

specific

locations.

In

a

context

it

is

suggested

to

disallow

direct

script

execution

at

least

for

locations

/fileadmin/

and

/uploads/.


Cross-site scripting (XSS) vulnerability in the redirect function in functions.php in MyBB (aka MyBulletinBoard) 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter in a removesubscriptions action to moderation.php related to use of the ajax option to request a JavaScript redirect. NOTE: this can be leveraged to execute PHP code and bypass cross-site request forgery (CSRF) protection.

cross site scripting
cross site request forgery


Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action.


Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via (1) the name of a node object or the (2) sysContact or (3) sysLocation SNMP configuration field aka \Audit Log XSS.\ NOTE: these issues might be resultant from cross-site request forgery (CSRF) vulnerabilities.


Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences as demonstrated by a crafted nickname field to vserver/apply.


Multiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator (2) perform cross-site scripting (XSS) (3) perform SQL injection or have other unspecified impact via unknown vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences aka Bug ID CSCtr78143.


Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences. NOTE: this issue exists because of an incomplete fix for CVE-2011-0748. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the PortRule_Name parameter.


Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the (1) wp_relatedposts_title (2) wp_relatedposts_num or (3) wp_relatedposts_type parameter.


Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration page in the Recaptcha (aka WP-reCAPTCHA) plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting (XSS) sequences via the (1) recaptcha_opt_pubkey (2) recaptcha_opt_privkey (3) re_tabindex (4) error_blank (5) error_incorrect (6) mailhide_pub (7) mailhide_priv (8) mh_replace_link or (9) mh_replace_title parameter.