Security
Headlines
HeadlinesLatestCVEs

Tag

#xss

CVE-2023-41423: There is a stored XSS vulnerability · Issue #316 · terrylinooo/githuber-md

Cross Site Scripting vulnerability in WP Githuber MD plugin v.1.16.2 allows a remote attacker to execute arbitrary code via a crafted payload to the new article function.

CVE
#xss#vulnerability#js#git#wordpress#php
CVE-2023-21523

A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account.

CVE-2023-21522: Article Not Found

A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially control a script that is executed in the victim's browser then they can execute script commands in the context of the affected user account. 

CVE-2023-30962: Palantir | Trust and Security Portal

The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 .

CVE-2023-36886

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE-2023-38164

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE-2023-36800

Dynamics Finance and Operations Cross-site Scripting Vulnerability

CVE-2023-0119: Invalid Bug ID

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

GHSA-p9q8-7x22-5x77: Cecil Cross-site Scripting vulnerability

Cross-site Scripting (XSS) - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1.