XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. There are no known workarounds apart from upgrading to a fixed version.

Expand Up @@ -44,12 +44,12 @@ endDocument .#----------------------------------------------------- .expect|xhtml/1.0 .#----------------------------------------------------- formatmacro2formatmacro3 texttextformatmacro4 formatmacro2formatmacro3 texttextformatmacro4 .#----------------------------------------------------- .expect|annotatedxhtml/1.0 .#----------------------------------------------------- formatmacro2formatmacro3 texttextformatmacro4 formatmacro2formatmacro3 texttextformatmacro4 .#----------------------------------------------------- .input|xhtml/1.0 .#----------------------------------------------------- formatmacro2formatmacro3 texttextformatmacro4 formatmacro2formatmacro3 texttextformatmacro4

CVE-2023-32070: XRENDERING-663: Restrict allowed attributes in HTML rendering · xwiki/xwiki-rendering@c40e2f5

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administrator to store a JavaScript payload in the web interface that will execute in the context of another administrator’s browser when viewed.


Palo Alto Networks Security Advisories / CVE-2023-0007

Attack Vector **NETWORK**

Scope **UNCHANGED**

Attack Complexity **LOW**

Confidentiality Impact **HIGH**

Privileges Required **HIGH**

Integrity Impact **HIGH**

User Interaction **NONE**

Availability Impact **NONE**

NVD JSON

Published **2023-05-10**

Updated **2023-05-10**

Reference **PAN-166872**

Discovered **externally**

**Description**

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administrator to store a JavaScript payload in the web interface that will execute in the context of another administrator’s browser when viewed.

**Product Status**

Versions

Affected

Unaffected

Cloud NGFW

None

All

PAN-OS 11.0

None

All

PAN-OS 10.2

None

All

PAN-OS 10.1

None

All

PAN-OS 10.0

< 10.0.7 on Panorama

\>= 10.0.7 on Panorama

PAN-OS 9.1

< 9.1.16 on Panorama

\>= 9.1.16 on Panorama

PAN-OS 9.0

< 9.0.17 on Panorama

\>= 9.0.17 on Panorama

PAN-OS 8.1

< 8.1.25 on Panorama

\>= 8.1.25 on Panorama

Prisma Access

None

All

**Severity:MEDIUM**

CVSSv3.1 Base Score:6.5 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)

**Exploitation Status**

Palo Alto Networks is not aware of any malicious exploitation of this issue.

**Weakness Type**

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

**Solution**

This issue is fixed in PAN-OS 8.1.25, PAN-OS 9.0.17, PAN-OS 9.1.16, PAN-OS 10.0.7, and all later PAN-OS versions.

**Workarounds and Mitigations**

This issue requires the attacker to have authenticated access to the PAN-OS web interface. You can mitigate the impact of this issue by following best practices for securing the PAN-OS web interface. Please review the Best Practices for Securing Administrative Access in the PAN-OS technical documentation at https://docs.paloaltonetworks.com/best-practices.

**Acknowledgments**

Palo Alto Networks thanks Colin McQueen for discovering and reporting this issue.

**Timeline**

2023-05-10 Initial publication

CVE-2023-0007: CVE-2023-0007 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

*   *   Actions
        
        Automate any workflow
        
    *   Packages
        
        Host and manage packages
        
    *   Security
        
        Find and fix vulnerabilities
        
    *   Codespaces
        
        Instant dev environments
        
    *   Copilot
        
        Write better code with AI
        
    *   Code review
        
        Manage code changes
        
    *   Issues
        
        Plan and track work
        
    *   Discussions
        
        Collaborate outside of code
        
    
    Explore
    
    *   All features
    *   Documentation
    *   GitHub Skills
    *   Blog
    
*   For
    
    *   Enterprise
    *   Teams
    *   Startups
    *   Education
    
    By Solution
    
    *   CI/CD & Automation
    *   DevOps
    *   DevSecOps
    
    Case Studies
    
    *   Customer Stories
    *   Resources
    
*   *   GitHub Sponsors
        
        Fund open source developers
        
    
    *   The ReadME Project
        
        GitHub community articles
        
    
    Repositories
    
    *   Topics
    *   Trending
    *   Collections
    
*   Pricing

CVE-2023-2630: fixed sql injection in translation api (#14952) · pimcore/pimcore@7e32cc2

VOTAB Voting Quiz PHP Script version 1.0 suffers from a cross site scripting vulnerability.

┌┌───────────────────────────────────────────────────────────────────────────────────────┐││ C r a C k E r ┌┘┌┘ T H E C R A C K O F E T E R N A L M I G H T ││└───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐┌┌───────────────────────────────────────────────────────────────────────────────────────┐┌┘ [ Vulnerability ] ┌┘└───────────────────────────────────────────────────────────────────────────────────────┘┘: Author : CraCkEr :│ Website : codesler.com ││ Vendor : Codesler - Rohit Chouhan (codester.com) ││ Software : VOTAB - Voting Quiz PHP Script 1.0 ││ Vuln Type: Reflected XSS ││ Impact : Manipulate the content of the site ││ ││────────────────────────────────────────────────────────────────────────────────────────││ ┌┘└───────────────────────────────────────────────────────────────────────────────────────┘┘: :│ Release Notes: ││ ═════════════ ││ The attacker can send to victim a link containing a malicious URL in an email or ││ instant message can perform a wide variety of actions, such as stealing the victim's ││ session token or login credentials ││ │┌┌───────────────────────────────────────────────────────────────────────────────────────┐┌┘ ┌┘└───────────────────────────────────────────────────────────────────────────────────────┘┘Greets: The_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL CryptoJob (Twitter) twitter.com/0x0CryptoJob ┌┌───────────────────────────────────────────────────────────────────────────────────────┐┌┘ © CraCkEr 2023 ┌┘└───────────────────────────────────────────────────────────────────────────────────────┘┘Path: /search.phpGET parameter 'q' is vulnerable to RXSShttps://website/search.php?q=drmmt<script>alert(1)</script>tehb4[-] Done

VOTAB Voting Quiz PHP Script 1.0 Cross Site Scripting

Red Hat Security Advisory 2023-2111-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.12.16.

-----BEGIN PGP SIGNED MESSAGE----- 
Hash: SHA256

===================================================================== 
 Red Hat Security Advisory

Synopsis: Moderate: OpenShift Container Platform 4.12.16 security update 
Advisory ID: RHSA-2023:2111-01 
Product: Red Hat OpenShift Enterprise 
Advisory URL: https://access.redhat.com/errata/RHSA-2023:2111 
Issue date: 2023-05-10 
CVE Names: CVE-2022-3064 
=====================================================================

1. Summary:

Red Hat OpenShift Container Platform release 4.12.16 is now available with 
updates to packages and images that fix several bugs.

This release includes a security update for Red Hat OpenShift Container 
Platform 4.12.

Red Hat Product Security has rated this update as having a security impact 
of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which 
gives a detailed severity rating, is available for each vulnerability from 
the CVE link(s) in the References section.

2. Description:

Red Hat OpenShift Container Platform is Red Hat's cloud computing 
Kubernetes application platform solution designed for on-premise or private 
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container 
Platform 4.12.16. See the following advisory for the container images for 
this release:

https://access.redhat.com/errata/RHSA-2023:2110

Security Fix(es):

* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing 
malicious or large YAML documents (CVE-2022-3064)

For more details about the security issue(s), including the impact, a CVSS 
score, acknowledgments, and other related information, refer to the CVE 
page(s) listed in the References section.

All OpenShift Container Platform 4.12 users are advised to upgrade to these 
updated packages and images when they are available in the appropriate 
release channel. To check for available updates, use the OpenShift CLI (oc) 
or web console. Instructions for upgrading a cluster are available at 
https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html

3. Solution:

For OpenShift Container Platform 4.12 see the following documentation, 
which will be updated shortly for this release, for important instructions 
on how to upgrade your cluster and fully apply this asynchronous errata 
update:

https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html

4. Bugs fixed (https://bugzilla.redhat.com/):

2163037 - CVE-2022-3064 go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents

5. References:

https://access.redhat.com/security/cve/CVE-2022-3064 
https://access.redhat.com/security/updates/classification/#moderate 
https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html 
https://access.redhat.com/articles/11258

6. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact 
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc. 
-----BEGIN PGP SIGNATURE----- 
Version: GnuPG v1

iQIVAwUBZFsxxtzjgjWX9erEAQilSBAAp2LYTDNr1e0n8dDRI8eBgpOmAkS0umHC 
H51R7Osdj8cTWQNyU4tgiH76YlrmDpFRUOjLYkS1ppltky1j/vXsswTl+f9vC0Xf 
Hab/jiNo0+GVc0R/2W8j1brAaxkNkZFvJbv74utpMDvcJud6lKlO2yV5Bh/2M9TF 
uFks+LHB1XOmOLCf+uaJ3doqNAXyNy8TPlTUuyV2EgwgRuprRcclzWL+iPtVy9ov 
j5TYX4GVar7s7ZLLHDHbLQYYau1gkk/K+Ws8kgigIpIN14H9hKSLTbqyU20iYEpm 
ZyAcsL0ToPiIfrPKnuxjQ8cYOoQnsEDHoYfXBBBUDx+ow8ZidmmypzPe22518dE1 
IH9JDa1Dy5BZpkFbjWc7NtebfSDPfso42CtYI+Xs4bXv5hRXRBaeqTV3S/zUlC+w 
YrhKeDzdfDyE03P2cJnSysyh5+Nyyv7Kjs2ir/HmnCgRfWio7owPV+j4UfN4zH2i 
ZaDDjMNzrV0MwDw7j0Uma8RkoSdhF4OyKv+/W3FdHzZkzvpFTpPgtCOWOvmhkxEn 
jUipgJ0ufZ2vsI6AcUjQ1EDXs7pPeD+Zfs/bmgzoq3ki2jPSj9QlChKdH/zCxsPU 
asYcxMFmehfKQhTnculLtfvqCDxJyn0nG2impResK9LR4q4TyhF++m97dPNc0f/6 
ZTFnkMbgo4Y= 
=KJRf 
-----END PGP SIGNATURE----- 
-- 
RHSA-announce mailing list 
RHSA-announce@redhat.com 
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2023-2111-01

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Mass Email To users plugin <= 1.1.4 versions.

**Solution**

Update the WordPress Mass Email To users plugin to the latest available version (at least 1.1.5).

Found this useful? Thank minhtuanact for reporting this vulnerability. Buy a coffee ☕

minhtuanact discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Mass Email To users Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.1.5.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2022-47600: WordPress Mass Email To users plugin <= 1.1.4 - Cross Site Scripting (XSS) - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fugu Maintenance Switch plugin <= 1.5.2 versions.

**Solution**

No patched version is available.

Found this useful? Thank minhtuanact for reporting this vulnerability. Buy a coffee ☕

minhtuanact discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Maintenance Switch Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2022-47590: WordPress Maintenance Switch plugin <= 1.5.2 - Cross Site Scripting (XSS) - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tim Stephenson WP-CORS plugin <= 0.2.1 versions.

**Solution**

No patched version is available. No reply from the vendor.

Justiice discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress WP-CORS Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2022-47606: WordPress WP-CORS plugin <= 0.2.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Cornel Raiu WP Search Analytics plugin <= 1.4.5 versions.

**Solution**

Update the WordPress WP Search Analytics plugin to the latest available version (at least 1.4.6).

Justiice discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress WP Search Analytics Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.4.6.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2022-47587: WordPress WP Search Analytics plugin <= 1.4.5 - Cross Site Scripting (XSS) - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin <= 1.7.0.10 versions.

**Solution**

Update the WordPress Charitable plugin to the latest available version (at least 1.7.0.11).

TEAM WEBoB of BoB 11th discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Charitable Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.7.0.11.

**3 other known vulnerabilities for this plugin**To plugin page

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

Tag

#xss