Security
Headlines
HeadlinesLatestCVEs

Tag

#xss

CVE-2023-24921

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE
Open in Source
#xss#vulnerability#microsoft
CVE-2023-24920

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE-2023-24919

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE-2023-24879

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE-2023-27070: [Security] Stored XSS in platform name · Issue #53 · totaljs/openplatform

A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field.

CVE-2023-27069: [Security] Stored XSS in account name · Issue #52 · totaljs/openplatform

A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field.

CVE-2023-1395: SourceCodester Yoga Class Registration System list.php cross site scripting_Dwayne_Wade的博客-CSDN博客

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222982 is the identifier assigned to this vulnerability.

CVE-2023-1396

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin/traveller_details.php. The manipulation of the argument address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222983.

CVE-2023-1397

A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222984.

CVE-2022-23791

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software and Technology Customer Relation Manager allows Cross-Site Scripting (XSS).This issue affects Customer Relation Manager: before 2022.03.13.