A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

▾ Sunlitmayurik · best_pos_management_systemEPSS 0.43%via NVD

CVE-2023-0945Low· 3.5

3y ago

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the inp…

▾ Sunlitmayurik · best_pos_management_systemEPSS 0.36%via NVD

CVE-2019-17003Medium· 6.1

3y ago

Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.

▾ Sunlitmozilla · firefox_mobileEPSS 0.41%via NVD

CVE-2023-24070Medium· 6.1

3y ago

app/View/AuthKeys/authkey_display.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field.

▾ Sunlitmisp-project · mispEPSS 0.41%via NVD

CVE-2023-24027Medium· 6.1

3y ago

In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name.

▾ Sunlitmisp-project · mispEPSS 0.40%via NVD

CVE-2022-47928Medium· 6.1

3y ago

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp.

▾ Sunlitmisp-project · mispEPSS 0.41%via NVD

CVE-2022-42118Medium· 6.1PoC

3y ago

A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject…

A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject…

▾ Twilightliferay · liferay_portalEPSS 0.97%via NVD

CVE-2022-20969Medium· 4.8

3y ago

A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the Cisco Umbrella dashboard. This vulnerability i…

A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the Cisco Umbrella dashboard. This vulnerability i…

▾ SunlitEPSS 0.47%via NVD

CVE-2022-42991Medium· 5.4

3y ago

A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field.

A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field.

▾ Sunlitsimple_online_public_access_catalog_project · simple_online_public_access_catalogEPSS 0.47%via NVD

CVE-2022-42992Medium· 5.4

3y ago

Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields.

Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields.

▾ Sunlittrain_scheduler_app_project · train_scheduler_appEPSS 0.47%via NVD

CVE-2022-35155Medium· 6.1PoC

3y ago

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter.

▾ Twilightphpgurukul · bus_pass_management_systemEPSS 2.5%via NVD

CVE-2022-28598Medium· 6.1PoC

4y ago

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.

▾ Twilightfrappe · erpnextEPSS 4.1%via NVD

CVE-2022-35554Medium· 6.1

4y ago

Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side.

▾ Sunlitbpcbt · smartvistaEPSS 0.53%via NVD

CVE-2022-36530Medium· 6.1

4y ago

An issue was discovered in rageframe2 2.6.37

An issue was discovered in rageframe2 2.6.37. There is a XSS vulnerability in the user agent related parameters of the info.php page.

▾ Sunlitrageframe · rageframeEPSS 0.89%via NVD

CVE-2022-24654Medium· 5.4PoC

4y ago

Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload.

Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload.

▾ Twilightintelbras · ata_200_firmwareEPSS 1.2%via NVD

CVE-2022-35509Medium· 5.4

4y ago

An issue was discovered in EyouCMS 1.5.8

An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, al…

▾ Sunliteyoucms · eyoucmsEPSS 0.57%via NVD

CVE-2022-35493Medium· 6.1PoC

4y ago

A Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam.in, eShop - Multipurpose Ecommerce Store Website version 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the get_pro…

A Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam.in, eShop - Multipurpose Ecommerce Store Website version 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the get_pro…

▾ Twilightwrteam · eshop_-_ecommerce_/_store_websiteEPSS 1.7%via NVD

CVE-2022-35118Medium· 6.1

4y ago

PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.

▾ Sunlitpyrocms · pyrocmsEPSS 0.51%via NVD

CVE-2022-34611Medium· 5.4

4y ago

A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac #" text field.

A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac #" text field.

▾ Sunlitonline_fire_reporting_system_project · online_fire_reporting_systemEPSS 0.52%via NVD

CVE-2022-35131Critical· 9.0PoC

4y ago

Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

▾ Abyssaljoplinapp · joplinEPSS 2.3%via NVD

CVE-2020-35305Medium· 6.1

4y ago

Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog.

▾ Sunlitgollum_project · gollumEPSS 0.77%via NVD

CVE-2022-32074Medium· 5.4PoC

4y ago

A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML vi…

A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML vi…

▾ Twilightenhancesoft · osticketEPSS 1.5%via NVD

CVE-2022-31904Medium· 6.1

4y ago

EGT-Kommunikationstechnik UG Mediacenter before v2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Online_Update.php.

▾ Sunlituberrider · mediacenterEPSS 0.58%via NVD

CVE-2022-33098Medium· 6.1PoC

4y ago

Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function

Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted SVG document, with JavaSc…

▾ Twilightmagnolia-cms · magnolia_cmsEPSS 53%via NVD

CVE-2022-33075Medium· 5.4PoC

4y ago

A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors.

▾ Twilightphpgurukul · zoo_management_systemEPSS 0.64%via NVD

CVE-2022-31897Medium· 6.1PoC

4y ago

SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?msg=.

▾ Twilightphpgurukul · zoo_management_systemEPSS 0.90%via NVD