Multiple cross-site scripting (XSS) vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) year and (2) mday parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0 as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL which is not properly handled in an error message.


Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users with administer taxonomy permissions or create node permissions when free tagging is enabled to inject arbitrary web script or HTML via vocabulary (1) names (2) terms and (3) filter menus.


Cross-site scripting (XSS) vulnerability in LXR Cross Referencer before 0.9.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the search body and the results page for a search a different vulnerability than CVE-2009-4497 and CVE-2010-1448.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows and before 4.1 on Mac OS X 10.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper UTF-7 canonicalization and lack of termination of a quoted string in an HTML document.


Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets (CSS) strings that are processed as script by Internet Explorer.


Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and possibly (2) message parameters. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows and before 4.1 on Mac OS X 10.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML document fragments.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows and before 4.1 on Mac OS X 10.4 allows remote attackers to inject arbitrary web script or HTML via a FRAME element with a SRC attribute composed of a javascript: sequence preceded by spaces.


Cross-site scripting (XSS) vulnerability in the toStaticHTML API as used in Microsoft Office InfoPath 2003 SP3 2007 SP1 and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or HTML via vectors related to sanitization.


Cross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to inject arbitrary web script or HTML via the subj parameter which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users with certain creation privileges to inject arbitrary web script or HTML via the (1) content parameter in conjunction with a /admin/poll/add PATH_INFO the (2) meta parameter in conjunction with a /admin/category/add PATH_INFO and the (3) keyword parameter in conjunction with a /admin/tag/add PATH_INFO.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows and before 4.1 on Mac OS X 10.4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) paste or (2) drag-and-drop operation for a selection.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Consona

Live

Assistance

Dynamic

Agent

and

Subscriber

Assistance

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

crafted

input

to

ASP

pages

as

demonstrated

using

the

backurl

parameter

to


Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hostname (aka the REMOTE_HOST variable) related to the CookielessGenerateFilename and CookielessReadFile functions.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows and before 4.1 on Mac OS X 10.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving DOM constructor objects related to a \scope management issue.\


Cross-site scripting (XSS) vulnerability in the AddThis Button module 5.x before 5.x-2.2 and 6.x before 6.x-2.9 for Drupal allows remote authenticated users with administer addthis privileges to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string (2) the BASE parameter or (3) the ega_1 parameter. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to inject arbitrary web script or HTML via the id_auk parameter which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this might be resultant from CVE-2010-1855.


Multiple cross-site scripting (XSS) vulnerabilities in BBSXP 2008 SP2 allow remote attackers to inject arbitrary web script or HTML via the URI in a request to (1) AddPost.asp (2) AddTopic.asp (3) Admin_Default.asp (4) Bank.asp (5) Manage.asp and (6) ShowPost.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 and the Server Console in VMware Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine.


in

Mozilla

Firefox

before

and

Thunderbird

before

inserts

a

U+FFFD

sequence

into

text

in

certain

circumstances

involving

undefined

positions

which

might

make

it

easier

for

remote

attackers

to

conduct

cross-site

scripting

(XSS)

attacks

via

crafted

text.


Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) element or (2) defaultColor parameter to the Colour Picker page; the (3) formName parameter (4) element parameter or (5) full name field to the User Picker page; the (6) formName parameter (7) element parameter or (8) group name field to the Group Picker page; the (9) announcement_preview_banner_st parameter to unspecified components related to the Announcement Banner Preview page; unspecified vectors involving the (10) groupnames.jsp (11) indexbrowser.jsp (12) classpath-debug.jsp (13) viewdocument.jsp or (14) cleancommentspam.jsp page; the (15) portletKey parameter to runportleterror.jsp; the (16) URI to issuelinksmall.jsp; the (17) afterURL parameter to screenshot-redirecter.jsp; or the (18) HTTP Referrer header to 500page.jsp as exploited in the wild in April 2010.


Cross-site scripting (XSS) vulnerability in the fix_non_standard_entities function in the KSES HTML text cleaning library (weblib.php) as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities.


Multiple cross-site scripting (XSS) vulnerabilities in Virtual War (aka VWar) 1.6.1 R2 allow remote attackers to inject arbitrary web script or HTML via (1) the Additional Information field to challenge.php the (2) Additional Information or (3) Contact information field to joinus.php (4) the War Report field to admin/admin.php in a finishwar action or (5) the Nick field to profile.php.


Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in the request_filesystem_credentials function in wp-admin/includes/file.php in WordPress before 3.0.2 allow remote servers to inject arbitrary web script or HTML by providing a crafted error message for a (1) FTP or (2) SSH connection attempt.


Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1 5.x before SGOS 5.4.5.1 5.5 before SGOS 5.5.4.1 and 6.x before SGOS 6.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to manageuser.php (2) y parameter in a newcal action to manageajax.php and the (3) pic parameter to thumb.php.


Cross-site scripting (XSS) vulnerability in jsp/admin/tools/remote_share.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85) as used in multiple products allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to $errorString.


Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid parameter in an editItem action to administrator/index.php. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in members/profileCommentsResponse.php in Rayzz Photoz allows remote attackers to inject arbitrary web script or HTML via the profileCommentTextArea parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewType and (2) sort parameters in a browse action to livelink/livelink; and the (3) nodeid (4) setctx and (5) support parameters to livelinkdav/nodes/OOB_DAVWindow.html.


Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter (aka the search field). NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1 as used in Bugzilla Moodle and other products allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.


Cross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the f_search_keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to (2) modules/news/archive.php (3) modules/news/topics.php and (4) modules/contact/index.php different vectors than CVE-2007-1965.


Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in a jscalendar action to index.php. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to server.php.


Cross-site scripting (XSS) vulnerability in the Category Tokens module 6.x before 6.x-1.1 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML by editing or creating vocabulary names which are not properly handled in token help.


Multiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to inject arbitrary web script or HTML via the (1) category_name (2) category_description (3) event_name or (4) event_description parameter.


Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.


Cross-site scripting (XSS) vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wptouch_settings parameter to include/adsense-new.php. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) mail (2) title (3) u and (4) url parameters. NOTE: the q parameter is already covered by CVE-2009-2302.


Multiple cross-site scripting (XSS) vulnerabilities in KSES as used in WordPress before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the & (ampersand) character (2) the case of an attribute name (3) a padded entity and (4) an entity that is not in normalized form.


DaDaBIK 4.3 beta3 when running in a case-sensitive environment does not include the htmLawed library which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting (XSS) attacks via the (1) html content and (2) rich_editor fields. NOTE: some of these details are obtained from third party information.


Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.


Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web script or HTML via the (1) post_content parameter to post/edit/2/p1.html related to views/post.php; the (2) slogan parameter to admin/site/2.html related to views/admin.php; or the (3) subcatname or (4) description parameter to admin/forum/create_sub.html related to views/admin.php.


Cross-site scripting (XSS) vulnerability in SemanticTagService.js in IBM WebSphere Portal 6.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field). NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter (title field) in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) drop-down selection lists (2) the > (greater than) character in the SquirrelSpell spellchecking plugin and (3) errors associated with the Index Order (aka options_order) page.


Cross-site scripting (XSS) vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the db_type parameter related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP.


Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.


Cross-site scripting (XSS) vulnerability in url-gateway.php in Jurpopage 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1 as used in Bugzilla 3.7.1 through 3.7.3 and 4.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf.


Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) countrycode parameter to contact.asp USERNAME parameter to (2) gateway.asp and (3) cart.asp and the specific parameter to (4) quote.asp and (5) buyitnow.


Cross-site scripting (XSS) vulnerability in the Integrated Solution Console in the Administrative Console component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related in part to \URL injection.\


Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter (aka Search Box field). NOTE: some of these details are obtained from third party information.


Cross-site

scripting

(XSS)

vulnerability

in

the

httpError

method

in

in

SilverStripe

before

and

before

when

custom

error

handling

is

not

used

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

\missing

URL

actions.\


Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HOST_ID (2) OS (3) GROUP (4) exportFile (5) load (6) type or (7) tab parameter to INDEX.do the (8) reported parameter to INDEX2.do the (9) gId parameter to hostlist.do the (10) newWindow parameter to globalSettings.do or the (11) STATUS parameter to enableHost.do. Fixed in Build 9000.


Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8 and Horde Groupware Webmail Edition before 1.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka fmusername) (2) password (aka fmpassword) or (3) server (aka fmserver) field in a fetchmail_prefs_save action related to the Fetchmail configuration a different issue than CVE-2010-3695. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) body parameter to action.php and the (2) amount and (3) action parameters to admin/index.php.


Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) firstname (2) lastname (3) website (4) aim (5) yahoo (6) jabber (7) about (8) pass1 and (9) pass2 parameters in a register action.


Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML by entering it in an unspecified window.


Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver or the method parameter to (2) acl (3) domain (4) group (5) gso (6) gsogroup (7) os (8) pop (9) rule (10) user or (11) webseal in ibm/wpm/.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18 when magic_quotes_gpc is disabled allow remote attackers to inject arbitrary web script or HTML via the (1) siteurl and (2) urlbanner parameters.


Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1 as used in Bugzilla Moodle and other products allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf.


Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu related to documentation that specifies this field as a text field rather than an HTML field a similar issue to CVE-2010-4569 and CVE-2010-4570.


Cross-site scripting (XSS) vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnews_title parameter a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: this might be the same as CVE-2009-4083.1 or CVE-2011-0457.


Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in an olsrd.xml action to pkg_edit.php (2) the xml parameter to pkg.php or the if parameter to (3) status_graph.php or (4) interfaces.php a different vulnerability than CVE-2008-1182 and CVE-2010-4246.


Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the __VIEWSTATE parameter. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in the rich-text-editor component in Open Ticket Request System (OTRS) before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the \source code\ feature in the customer interface.


Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.


error.php in PhpMyAdmin 3.3.8.1 and other versions before 3.4.0-beta1 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing \@\ characters as demonstrated using \a@url@page\.


Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element as demonstrated by <scr<body>ipt> and </scr<body>ipt> sequences.


Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0 when the Blog plugin is enabled allow remote attackers to inject arbitrary web script or HTML via the (1) Name (2) Website and (3) Email parameters. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) usermsn (2) useremail and (3) userphone parameters in a modifyDetails action.


Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5 when register_globals is enabled allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash_additem.php and the (2) status_data parameter to system/admin/dash_status.php. NOTE: some of these details are obtained from third party information.


Bugzilla before 3.2.10 3.4.x before 3.4.10 3.6.x before 3.6.4 and 4.0.x before 4.0rc2 does not properly handle whitespace preceding a (1) javascript: or (2) data: URI which allows remote attackers to conduct cross-site scripting (XSS) attacks via the URL (aka bug_file_loc) field.


Multiple cross-site scripting (XSS) vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to (1) bin/viewrev/Main/WebHome and (2) bin/view/Blog and the (3) register_first_name and (4) register_last_name parameters to bin/register/XWiki/Register. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0 when Internet Explorer is used allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image (2) background or (3) font-family Cascading Style Sheets (CSS) property a different vulnerability than CVE-2010-2479.


Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default_news or (2) sponsors cookies which are not properly handled by (a) controllers/index.ctrl.php or (b) controllers/settings.ctrl.php.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

Manager

application

in

Apache

Tomcat

through

and

through

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

orderBy

or

sort

parameter

to

sessionsList.jsp

or

unspecified

input

to

sessionDetail.jsp

or

related

to

use

of

untrusted

web

applications.


Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request.


Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and the (4) ChartName parameter to CustomChart.aspx.


Jenkins Mask Passwords Plugin 3.0 and earlier does not escape the name and description of Non-Stored Password parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Job Generator Plugin 1.22 and earlier does not escape the name and description of Generator Parameter and Generator Choice parameters on Job Generator jobs' Build With Parameters views resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete (theme) data which could result in Stored Cross-Site Scripting (XSS) attack.


Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup parameter.


Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) in Mark Daniels Night Mode plugin <= 1.0.0 on WordPress via vulnerable parameters: &ntmode_page_settingenable-me &ntmode_page_settingbg-color &ntmode_page_settingtxt-color &ntmode_page_settinganc_color.


Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


In LibreHealth EHR 2.0.0 lack of sanitization of the GET parameters debug and InsId in interface\\billing\\sl_eob_process.php leads to multiple cross-site scripting (XSS) vulnerabilities.


An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .


Authenticated (contributor or higher role) Cross-Site Scripting (XSS) vulnerability in Donations plugin <= 1.8 on WordPress.


Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Credentials Plugin 1111.v35a_307992395 and earlier except 1087.1089.v2f1b_9a_b_040e4 1074.1076.v39c30cecb_0e2 and 2.6.1.1 does not escape the name and description of Credentials parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Multiple Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerabilities in Adam Skaat's Countdown & Clock plugin <= 2.3.2 at WordPress via &ycd-countdown-width &ycd-progress-height &ycd-progress-width &ycd-button-margin-top &ycd-button-margin-right &ycd-button-margin-bottom &ycd-button-margin-left &ycd-circle-countdown-before-countdown &ycd-circle-countdown-after-countdown vulnerable parameters.


In

LibreHealth

EHR

lack

of

sanitization

of

the

GET

parameters

formseq

and

formid

in

leads

to

multiple

cross-site

scripting

(XSS)

vulnerabilities.


An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .


Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting (XSS) vulnerability in the test parameter.


Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability in Cloudways Breeze plugin <= 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wp_ajax_* actions in the class Breeze_Configuration which includes the ability to change any of the plugin's settings including CDN setting which could be further used for XSS attack.


Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Jira Plugin 3.7 and earlier except 3.6.1 does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier except 3.10.1 does not escape the name and description of Promoted Build parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


The WP Cerber Security Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard leading to an unauthenticated stored Cross-Site Scripting vulnerability.


The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The Better WordPress Google XML Sitemaps WordPress plugin through 1.4.1 does not sanitise and escape its logs when outputting them in the admin dashboard which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins


The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SVG files to be uploaded by default via the dnd_codedropz_upload AJAX action which could lead to Stored Cross-Site Scripting issue


The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page leading to a Reflected Cross-Site Scripting issue


A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.


The Event List WordPress plugin before 0.8.8 does not sanitise and escape some of its settings allowing high privilege users such as admin to perform Cross-Site Scripting attacks against other admin even when the unfiltered_html is disallowed


The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting (XSS) vulnerability.


The Insights from Google PageSpeed WordPress plugin before 4.0.4 does not sanitise and escape various parameters before outputting them back in attributes in the plugin's settings dashboard leading to Reflected Cross-Site Scripting


The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.96 does not sanitise and escape the QUERY_STRING before outputting it back in an admin page leading to a Reflected Cross-Site Scripting in browsers which do not encode characters


The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the ~/includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user clicks on a specially crafted link by an attacker. This affects versions up to and including 5.0.8.


The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard leading to a Reflected Cross-Site Scripting


The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The

Ninja

Forms

File

Uploads

Extension

WordPress

plugin

is

vulnerable

to

reflected

cross-site

scripting

due

to

missing

sanitization

of

the

files

filename

parameter

found

in

the

file

which

can

be

used

by

unauthenticated

attackers

to

add

malicious

web

scripts

to

vulnerable

WordPress

sites

in

versions

up

to

and

including


The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a role as low as author) before outputting them leading to a Stored Cross-Site Scripting issue


The Interactive Medical Drawing of Human Body WordPress plugin through 1.0 does not sanitise and escape the Link field allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


The Ditty (formerly Ditty News Ticker) WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting (XSS) vulnerability.


The Bulk Creator WordPress plugin through 1.0.1 does not sanitize and escape the post_type parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocs_in_order_currency parameter of the woocs_get_products_price_html AJAX action (available to both unauthenticated and authenticated users) before outputting it back in the response leading to a Reflected Cross-Site Scripting


The Admin Menu Editor WordPress plugin through 1.0.4 does not sanitize and escape a parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


The WP Social Buttons WordPress plugin through 2.1 does not sanitise and escape its settings allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.


The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting back in an admin page leading to a Reflected Cross-Site Scripting.


The WP Accessibility Helper (WAH) WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page leading to a Reflected Cross-Site Scripting issue


The

Post

Grid

WordPress

plugin

before

does

not

sanitise

and

escape

the

parameter

before

outputting

it

back

in

the

response

of

the

post_grid_update_taxonomies_terms_by_posttypes

AJAX

action

available

to

any

authenticated

users

leading

to

a

Reflected

Cross-Site

Scripting


The Petfinder Listings WordPress plugin through 1.0.18 does not escape its settings allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting


The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 does not sanitize and escape the mmursp_id parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use of $_SERVER'PHP_SELF' found in the ~/options-fotobook.php file which allows attackers to inject arbitrary web scripts onto the page in versions up to and including 3.2.3.


The Database Peek WordPress plugin through 1.2 does not sanitize and escape the match parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The Random Banner WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the category parameter found in the ~/include/models/model.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 4.1.4. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The Countdown Coming Soon Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source translation strings before outputting them in the editor in the plugin admin panel allowing any user with access to the plugin (Translator and Administrator by default) to add arbitrary javascript payloads to the source strings leading to a stored cross-site scripting (XSS) vulnerability.


The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the error_message parameter before outputting it back in the response of the jltma_restrict_content AJAX action available to unauthenticated and authenticated users leading to a Reflected Cross-Site Scripting


The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the \Bad mapid\ error message leading to a Reflected Cross-Site Scripting


The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashboard leading to an unauthenticated Stored Cross-Site scripting


The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the tax_color_set_type parameter before outputting it back in the berocket_apl_color_listener AJAX action's response leading to a Reflected Cross-Site Scripting


The GD Mylist WordPress plugin through 1.1.1 does not sanitise and escape some of its settings allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability which could lead to Stored Cross-Site Scripting issues


The WP RSS Aggregator WordPress plugin before 4.20 does not sanitise and escape the id parameter in the wprss_fetch_items_row_action AJAX action before outputting it back in the response leading to a Reflected Cross-Site Scripting


The Photoswipe Masonry Gallery WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the thumbnail_width thumbnail_height max_image_width and max_image_height parameters found in the ~/photoswipe-masonry.php file which allows authenticated attackers to inject arbitrary web scripts into galleries created by the plugin and on the PhotoSwipe Options page. This affects versions up to and including 1.2.14.


The Embed Swagger WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping/sanitization and validation via the url parameter found in the ~/swagger-iframe.php file which allows attackers to inject arbitrary web scripts onto the page in versions up to and including 1.0.0.


The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page.


A cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to potentially obtain access to an ePO administrator's session by convincing the attacker to click on a carefully crafted link. This would lead to limited ability to alter some information in ePO due to the area of the User Interface the vulnerability is present in.


The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard leading to a Reflected Cross-Site Scripting


Themify Portfolio Post WordPress plugin before 1.1.7 does not sanitise and escape the num_of_pages parameter before outputting it back the response of the themify_create_popup_page_pagination AJAX action (available to any authenticated user) leading to a Reflected Cross-Site Scripting


The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks


The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputting it back in an admin page leading to a Reflected Cross-Site Scripting in browsers which do not encode characters


The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments which could allow high privilege users to import malicious ones (either intentionnaly or not) and lead to Stored Cross-Site Scripting issues


The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


The SearchIQ WordPress plugin before 3.9 contains a flag to disable the verification of CSRF nonces granting unauthenticated attackers access to the siq_ajax AJAX action and allowing them to perform Cross-Site Scripting attacks due to the lack of sanitisation and escaping in the customCss parameter


The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute leading to a Reflected Cross-Site Scripting issue in the network dashboard


The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the response leading to a Reflected Cross-Site Scripting


The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard leading to a Reflected Cross-Site Scripting issue


The Image optimization & Lazy Load by Optimole WordPress plugin before 3.3.2 does not sanitise and escape its \Lazyload background images for selectors\ settings which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfiltered_html capability is disallowed.


The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute leading to a Reflected Cross-Site Scripting


The SpiderCalendar WordPress plugin through 1.5.65 does not sanitise and escape the callback parameter before outputting it back in the page via the window AJAX action (available to both unauthenticated and authenticated users) leading to a Reflected Cross-Site Scripting issue.


phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')


The Mark Posts WordPress plugin before 2.0.1 does not escape new markers allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page leading to a Reflected Cross-Site Scripting


The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate the wlcms_login_custom_js parameter before outputting it back in the response while previewing leading to a Reflected Cross-Site Scripting issue


The SEO 301 Meta WordPress plugin through 1.9.1 does not escape its Request and Destination settings allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed


The WP Voting Contest WordPress plugin before 3.0 does not sanitise and escape the post_id parameter before outputting it back in the response via the wpvc_social_share_icons AJAX action (available to both unauthenticated and authenticated users) leading to a Reflected Cross-Site Scripting issue


The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in an admin page leading to a Reflected Cross-Site Scripting


The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the woosea_categories_dropdown AJAX action (available to any authenticated user) leading to a Reflected Cross-Site Scripting


The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting


The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard leading to a Reflected Cross-Site Scripting issue


The Menu Image Icons made easy WordPress plugin before 3.0.8 does not have authorisation and CSRF checks when saving menu settings and does not validate sanitise and escape them. As a result any authenticate users such as subscriber can update the settings or arbitrary menu and put Cross-Site Scripting payloads in them which will be triggered in the related menu in the frontend


The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter before using it in a SQL statement in the All Subscribers admin dashboard leading to a SQL injection which could also be used to perform Reflected Cross-Site Scripting attack against a logged in admin opening a malicious link


The CP Blocks WordPress plugin before 1.0.15 does not sanitise and escape its \License ID\ settings which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.


The

Amelia

WordPress

plugin

is

vulnerable

to

Cross-Site

Scripting

due

to

insufficient

escaping

and

sanitization

of

the

lastName

parameter

found

in

the

file

which

allows

attackers

to

inject

arbitrary

web

scripts

onto

a

pages

that

executes

whenever

a

user

accesses

the

booking

calendar

with

the

date

the

attacker

has

injected

the

malicious

payload

into.

This

affects

versions

up

to

and

including


The Plezi WordPress plugin before 1.0.3 has a REST endpoint allowing unauthenticated users to update the plz_configuration_tracker_enable option which is then displayed in the admin panel without sanitisation and escaping leading to a Stored Cross-Site Scripting issue


The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_quickview AJAX action's response (available to any authenticated user) leading to a Reflected Cross-Site Scripting


The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes leading to Reflected Cross-Site Scripting issues


The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Export All URLs WordPress plugin before 4.2 does not sanitise and escape the CSV filename before outputting it back in the page leading to a Reflected Cross-Site Scripting


The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting forms and does not sanitise as well as escape its form field values. As a result attackers could make logged in admin update and delete arbitrary forms via a CSRF attack and put Cross-Site Scripting payloads in them.


Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11.


The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The User Registration Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loader_text parameter found in the ~/includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary web scripts in versions up to and including 1.2.7. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The Popup Like box WordPress plugin before 3.6.1 does not sanitize and escape the ays_fb_tab parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to potentially obtain access to an ePO administrator's session by convincing the attacker to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO due to the area of the User Interface the vulnerability is present in.


The E2Pdf WordPress plugin before 1.16.45 does not sanitise and escape some of its settings which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the malicious submission


The Ad Inserter WordPress plugin before 2.7.10 Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page leading to a Reflected Cross-Site Scripting


The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard


The Flexi WordPress plugin before 4.20 does not sanitise and escape various parameters before outputting them back in some pages such as the user dashboard leading to a Reflected Cross-Site Scripting


The Migration Backup Staging WordPress plugin before 0.9.70 does not sanitise and escape the sub_page parameter before outputting it back in the page leading to a reflected Cross-Site Scripting


The Kunze Law WordPress plugin before 2.1 does not escape its 'E-Mail Error \From\ Address' settings allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST'page' parameter.


The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting.


The Social comments by WpDevArt WordPress plugin before 2.5.0 does not sanitise and escape its settings allowing high privilege users such as admin to perform cross-Site Scripting attacks even when unfiltered_html is disallowed


The AdRotate WordPress plugin before 5.8.23 does not escape Group Names which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action leading to a Reflected Cross-Site Scripting


The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings and does not have any sanitisation/escaping allowing any authenticated users such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook.


The Simple Tracking WordPress plugin before 1.7 does not sanitise and escape its settings allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1.


Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2.


The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings and does not sanitise as well as escape them which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack


Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.


Cross-site scripting - Reflected in Create Subaccount in GitHub repository neorazorx/facturascripts prior to 2022.07. This vulnerability can be arbitrarily executed javascript code to steal user'cookie perform HTTP request get content of `same origin` page etc ...


The th23 Social WordPress plugin through 1.2.0 does not sanitise and escape some of its settings which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Clipr WordPress plugin through 1.2.3 does not sanitise and escape its API Key settings before outputting it in an attribute leading to a Stored Cross-Site Scripting issue even when the unfiltered_html capability is disallowed


The ScrollReveal.js Effects WordPress plugin through 1.2 does not sanitise and escape its settings which could allow high privilege users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie.


The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not escape various settings before outputting them in attributes which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


The Thank Me Later WordPress plugin through 3.3.4 does not sanitise and escape the Message Subject field before outputting it in the Messages list which could allow high privileges users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute leading to a Reflected Cross-Site Scripting


Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the user's machine. Attackers can masquerade as authorized users via session cookies allowing them to perform any action allowed by the user account.


The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.


The Slide Anything WordPress plugin before 2.3.44 does not sanitize and escape sliders' description which could allow high privilege users such as editor and above to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed


The BMI BMR Calculator WordPress plugin through 1.3 does not sanitise and escape arbitrary POST data before outputting it back in the response leading to a Reflected Cross-Site Scripting


Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.


The Social Stickers WordPress plugin through 2.2.9 does not have CSRF checks in place when updating its Social Network settings and does not escape some of these fields which could allow attackers to make a logged-in admin change them and lead to Stored Cross-Site Scripting issues.


The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings like its \Referer address\ field which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the room parameter before outputting it back in an admin page leading to a Reflected Cross-Site Scripting issue


The Menubar WordPress plugin before 5.8 does not sanitise and escape the command parameter before outputting it back in the response via the menubar AJAX action (available to any authenticated users) leading to a Reflected Cross-Site Scripting


Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie.


The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Easily Generate Rest API Url WordPress plugin through 1.0.0 does not escape some of its settings allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Custom TinyMCE Shortcode Button WordPress plugin through 1.1 does not sanitise and escape the PHP_SELF variable before outputting it back in an attribute in an admin page leading to Reflected Cross-Site Scripting.


The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Good & Bad Comments WordPress plugin through 1.0.0 does not sanitise and escape its settings which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Fast Flow WordPress plugin before 1.2.11 does not sanitise and escape the page parameter before outputting back in an attribute in an admin dashboard leading to a Reflected Cross-Site Scripting


There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1 via the filter parameters.


Stored XSS via upload plugin functionality in zip format in GitHub repository neorazorx/facturascripts prior to 2022.06. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the user's machine. Attackers can masquerade as authorized users via session cookies allowing them to perform any action allowed by the user account.


The Page Security & Membership WordPress plugin through 1.5.15 does not sanitise and escape some of its settings which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input leading to a Reflected Cross-Site Scripting when the premium is enabled


The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


The Donorbox WordPress plugin before 7.1.7 does not sanitise and escape its Campaign URL settings before outputting it in an attribute leading to a Stored Cross-Site Scripting issue even when the unfiltered_html capability is disallowed


The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page leading to a Reflected Cross-Site Scripting issue


The WP YouTube Live WordPress plugin before 1.8.3 does not validate sanitise and escape various of its settings which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


The ULeak Security & Monitoring WordPress plugin through 1.2.3 does not have authorisation and CSRF checks when updating its settings and is also lacking sanitisation as well as escaping in some of them which could allow any authenticated users such as subscriber to perform Stored Cross-Site Scripting attacks against admins viewing the settings


The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action leading to a Reflected Cross-Site Scripting issue.


The Page Restriction WordPress (WP) WordPress plugin before 1.2.7 allows bad actors with administrator privileges to the settings page to inject Javascript code to its settings leading to stored Cross-Site Scripting that will only affect administrator users.


The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page which could allow attackers to perform reflected Cross-Site Scripting attacks.


The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data which could allow high privilege users to import malicious javascript code and lead to Stored Cross-Site Scripting issues


The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to and including 2.0.6.


The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data found in the ~/inc/admin.php file which allows unauthenticated attackers to inject arbitrary web scripts in versions up to and including 1.7.21.


The LayerSlider WordPress plugin before 7.1.2 does not sanitise and escape Project's slug before outputting it back in various place which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed


The Advanced Image Sitemap WordPress plugin through 1.2 does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an admin page leading to Reflected Cross-Site Scripting.


The Bulk Edit and Create User Profiles WordPress plugin before 1.5.14 does not sanitise and escape the Users Login which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


The WPQA Builder Plugin WordPress plugin before 5.2 used as a companion plugin for the Discy and Himer does not sanitise and escape the city phone or profile credentials fields when outputting it in the profile page allowing any authenticated user to perform Cross-Site Scripting attacks.


Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


SAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420 is susceptible to a Cross-Site Scripting attack by an unauthenticated attacker due to improper sanitization of the user inputs on the network. On successful exploitation an attacker can access certain reports causing a limited impact on confidentiality of the application data.


ACS

Commons

version

(and

earlier)

suffers

from

a

Reflected

Cross-site

Scripting

(XSS)

vulnerability

in

endpoint

via

the

a

and

b

GET

parameters.

User

input

submitted

via

these

parameters

is

not

validated

or

sanitised.

An

attacker

must

provide

a

link

to

someone

with

access

to

AEM

Author

and

could

potentially

exploit

this

vulnerability

to

inject

malicious

JavaScript

content

into

vulnerable

form

fields

and

execute

it

within

the

context

of

the

victim's

browser.

The

exploitation

of

this

issue

requires

user

interaction

in

order

to

be

successful.


ColdFusion versions CF2021U3 (and earlier) and CF2018U13 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page malicious JavaScript content may be executed within the context of the victim's browser.


Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username parameter via GET. No authentication is required.


SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php.


The

CleanTalk

AntiSpam

plugin

for

WordPress

is

vulnerable

to

Reflected

Cross-Site

Scripting

(XSS)

via

the

parameter

in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php`


On 16.1.x versions prior to 16.1.2.2 15.1.x versions prior to 15.1.5.1 14.1.x versions prior to 14.1.4.6 13.1.x versions prior to 13.1.5 and all versions of 12.1.x 11.6.x a DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP AFM CGNAT and PEM Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated


A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack.


ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.


Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create BitBucket Server consumers.


Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6 a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility (also referred to as the BIG-IP TMUI) that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated


Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting (XSS) vulnerability via the function strip_tags.


The

CleanTalk

AntiSpam

plugin

for

WordPress

is

vulnerable

to

Reflected

Cross-Site

Scripting

(XSS)

via

the

parameter

in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php`


Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves resulting in a stored cross-site scripting (XSS) exploitable by attackers with Item/Configure permission or otherwise able to control report contents.


Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file parameter via GET. Authentication is required.


HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function _generateFilename.


Combodi iTop is a web based IT Service Management tool. Prior to versions 2.7.6 and 3.0.0 cross-site scripting is possible for scripts outside of script tags when displaying HTML attachments. This issue is fixed in versions 2.7.6 and 3.0.0. There are currently no known workarounds.


Shopware is an open source e-commerce software platform. Prior to version 5.7.9 Shopware is vulnerable to non-stored cross-site scripting in the storefront. This issue is fixed in version 5.7.9. Users of older versions may attempt to mitigate the vulnerability by using the Shopware security plugin.


Persistent cross-site scripting (XSS) in the web interface of ipDIO allows an authenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into specific fields. The XSS payload will be executed when a legitimate user attempts to upload copy download or delete an existing configuration (Administrative Services).


Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutralize user input used in user name and language fields. Due to this improper neutralization it is possible to perform cross-site scripting via these fields. The issues were fixed in the 4.11 release. Users unable to upgrade are advised to add their own neutralize logic.


PrivateBin is minimalist open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin < v1.4.0 a cross-site scripting (XSS) vulnerability was found. The vulnerability is present in all versions from v0.21 of the project which was at the time still called ZeroBin. The issue is caused by the fact that SVGs can contain JavaScript. This can allow an attacker to execute code if the user opens a paste with a specifically crafted SVG attachment and interacts with the preview image and the instance isn't protected by an appropriate content security policy. Users are advised to either upgrade to version 1.4.0 or to ensure the content security policy of their instance is set correctly.


Burden v3.0 was discovered to contain a stored cross-site scripting (XSS) in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter.


ESAPI (The OWASP Enterprise Security API) is a free open source web application security control library. Prior to version 2.3.0.0 there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for \onsiteURL\ in the **antisamy-esapi.xml** configuration file that can cause \javascript:\ URLs to fail to be correctly sanitized. This issue is patched in ESAPI 2.3.0.0. As a workaround manually edit the **antisamy-esapi.xml** configuration files to change the \onsiteURL\ regular expression. More information about remediation of the vulnerability including the workaround is available in the maintainers' release notes and security bulletin.


Sylius is an open source eCommerce platform. In versions prior to 1.9.10 1.10.11 and 1.11.2 it is possible to upload an SVG file containing cross-site scripting (XSS) code in the admin panel. In order to perform a XSS attack the file itself has to be open in a new card or loaded outside of the IMG tag. The problem applies both to the files opened on the admin panel and shop pages. The issue is fixed in versions 1.9.10 1.10.11 and 1.11.2. As a workaround require a library that adds on-upload file sanitization and overwrite the service before writing the file to the filesystem. The GitHub Security Advisory contains more specific information about the workaround.


Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75 Ver.2.9.x series versions prior to Ver.2.9.40 Ver.2.10.x series versions prior to Ver.2.10.44 Ver.2.11.x series versions prior to Ver.2.11.42 and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. This vulnerability is different from CVE-2022-23916.


The SAP Focused Run (Real User Monitoring) - versions 200 300 REST service does not sufficiently sanitize the input name of the file using multipart/form-data resulting in Cross-Site Scripting (XSS) vulnerability.


SAP NetWeaver Enterprise Portal - versions 7.10 7.11 7.20 7.30 7.31 7.40 7.50 does not sufficiently encode user-controlled inputs resulting in reflected Cross-Site Scripting (XSS) vulnerability.


Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS) which can lead to privilege escalation. In this way admin can steal webmaster's cookies to get the webmaster's access.


Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function.


VIewComponent is a framework for building view components in Ruby on Rails. Versions prior to 2.31.2 and 2.49.1 contain a cross-site scripting vulnerability that has the potential to impact anyone using translations with the view_component gem. Data received via user input and passed as an interpolation argument to the `translate` method is not properly sanitized before display. Versions 2.31.2 and 2.49.1 have been released and fully mitigate the vulnerability. As a workaround avoid passing user input to the `translate` function or sanitize the inputs before passing them.


A

vulnerability

has

been

identified

in

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

SCALANCE

FE

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

PoE

SCALANCE

PoE

SCALANCE

TS

SCALANCE

TS

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

FE

SCALANCE

FE

SCALANCE

SCALANCE

ports

on

front)

SCALANCE

ports

on

front)

SCALANCE

ports

on

rear)

SCALANCE

ports

on

rear)

SCALANCE

ports

on

front)

SCALANCE

ports

on

front)

SCALANCE

ports

on

rear)

SCALANCE

ports

on

rear)

SCALANCE

TS

SCALANCE

TS

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

rear)

SCALANCE

PoE

ports

on

front)

SCALANCE

PoE

ports

on

rear)

SCALANCE

PoE

ports

on

front)

SCALANCE

PoE

ports

on

rear)

SCALANCE

PoE

TS

ports

on

front)

SIPLUS

NET

SCALANCE

The

integrated

web

server

could

allow

Cross-Site

Scripting

(XSS)

attacks

if

unsuspecting

users

are

tricked

into

accessing

a

malicious

link.

This

can

be

used

by

an

attacker

to

trigger

a

malicious

request

on

the

affected

device.


Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.


Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5).


Event Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the full_name parameter under register.php.


Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in FV Flowplayer Video Player (WordPress plugin) versions <= 7.5.18.727 via &fv_wp_flowplayer_field_splash parameter.


Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name of custom promotion levels resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.


Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in Simple Event Planner WordPress plugin <= 1.5.4 allows user with author or higher user rights inject the malicious code via vulnerable parameters: &customevent_organiser &customorganiser_email &customorganiser_contact.


The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the ~/includes/class-wp-statistics-ip.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site administrators view a sites statistics in versions up to and including 13.1.5.


Jenkins Team Views Plugin 0.9.0 and earlier does not escape team names resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Read permission.


Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the \key\ and \fm\ parameters in the component login.php.


Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the \A\ parameter in /widgets/debug.php.


Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Name parameter.


Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6). Vulnerable parameters &download_path &download_path_url &download_page_url &download_categories.


The

WP

Statistics

WordPress

plugin

is

vulnerable

to

Cross-Site

Scripting

due

to

insufficient

escaping

and

sanitization

of

the

platform

parameter

found

in

the

file

which

allows

attackers

to

inject

arbitrary

web

scripts

onto

several

pages

that

execute

when

site

administrators

view

a

sites

statistics

in

versions

up

to

and

including


Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.


Authenticated (contributor of higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Price Table plugin (versions <= 0.2.2).


Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6). Vvulnerable parameters &download_path &download_path_url &download_page_url.


Jenkins Agent Server Parameter Plugin 1.0 and earlier does not escape parameter names of agent server parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Custom Checkbox Parameter Plugin 1.1 and earlier does not escape parameter names of custom checkbox parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) attacks via the search parameter under the /cbpos/ app.


The

WP

Statistics

WordPress

plugin

is

vulnerable

to

Cross-Site

Scripting

due

to

insufficient

escaping

and

sanitization

of

the

browser

parameter

found

in

the

file

which

allows

attackers

to

inject

arbitrary

web

scripts

onto

several

pages

that

execute

when

site

administrators

view

a

sites

statistics

in

versions

up

to

and

including


Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.


All versions of package materialize-css are vulnerable to Cross-site Scripting (XSS) due to improper escape of user input (such as <not-a-tag />) that is being parsed as HTML/JavaScript and inserted into the Document Object Model (DOM). This vulnerability can be exploited when the user-input is provided to the autocomplete component.


Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the \m\ parameter in the Dashboard of the current user. This vulnerability allows attackers to compromise session credentials via user interaction with a crafted link.


Jenkins List Git Branches Parameter Plugin 0.0.9 and earlier does not escape the name of the 'List Git branches (and more)' parameter resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Dashboard View Plugin 2.18 and earlier does not perform URL validation for the Iframe Portlet's Iframe source URL resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure views.


Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/ulog/index.html via the wd parameter.


There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use remediation guidance includes: install SystemLink version 2021 R3 or later install FlexLogger 2022 Q2 or later install LabVIEW 2021 SP1 install G Web Development 2022 R1 or later or install Static Test Software Suite version 1.2 or later.


Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5


Reflected cross site scripting (XSS)


Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the 'Global Build Stats' page resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.


Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin) <= 13.1.0.9


Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.


Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure or Item/Create permissions.


Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat parameter.


On all versions of 16.1.x 15.1.x 14.1.x 13.1.x 12.1.x and 11.6.x of F5 BIG-IP and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0 a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated


Social Codia SMS v1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.


On all versions of 16.1.x 15.1.x 14.1.x 13.1.x 12.1.x and 11.6.x of F5 BIG-IP APM and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0 a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of F5 BIG-IP Guided Configuration that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated


Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.php.


Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPress plugin) <= 1.2.2


Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters.


AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.


The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.


On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35 a stored Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated


Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/plog/index.html via the wd parameter.


AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.


Authenticated (admin+ user) Stored Cross-Site Scripting (XSS) in Modern Events Calendar Lite (WordPress plugin) <= 6.5.1


Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.


Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability.


Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Rundeck Plugin 3.6.10 and earlier does not restrict URL schemes in Rundeck webhook submissions resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Rundeck webhook payloads.


Jenkins Selection tasks Plugin 1.0 and earlier does not escape the name and description of Script Selection task variable parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Random String Parameter Plugin 1.0 and earlier does not escape the name and description of Random String parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi.


Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Multiselect parameter Plugin 1.3 and earlier does not escape the name and description of Multiselect parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins vboxwrapper Plugin 1.3 and earlier does not escape the name and description of VBox node parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Autocomplete Parameter Plugin 1.1 and earlier references Dropdown Autocomplete parameter and Auto Complete String parameter names in an unsafe manner from Javascript embedded in view definitions resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Autocomplete Parameter Plugin 1.1 and earlier does not escape the name of Dropdown Autocomplete and Auto Complete String parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name and description of Promotion Level parameters on views displaying parameters resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


TMS

was

discovered

to

contain

a

cross-site

scripting

(XSS)

vulnerability

in

the

component


An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cross-site scripting (XSS) vulnerability in admin/cgi-bin/listdir.pl allows authenticated remote administrators to inject arbitrary web script or HTML into an HTTP GET parameter (which reflect the user input without sanitization).


Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.


HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability via the prezzoperiodo4 parameter in creaprezzi.php.


Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp.


Bootstrap v3.1.11 and v3.3.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Title parameter in /vendor/views/add_product.php.