#xss

CVE-2023-2349: cve_hub/Service Provider Management System - vuln 4.pdf at main · E1CHO/cve_hub

A vulnerability classified as problematic has been found in SourceCodester Service Provider Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227592.

2 years ago

CVE

Open in Source

#xss #vulnerability #git #php #pdf

CVE-2023-30338: XSS vulnerabilities in pro2.0.3 · Issue #229 · emlog/emlog

Multiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters.

2 years ago

CVE

Open in Source

#xss #vulnerability #web #php

CVE-2023-24966: IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2023-24966)

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246904.

2 years ago

CVE

Open in Source

#xss #vulnerability #web #windows #linux #java #ibm

CVE-2023-2341: fixed xss on login page (#14975) · pimcore/pimcore@66f1089

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

2 years ago

CVE

Open in Source

#xss #csrf #git #auth

CVE-2023-2342

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.