) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): xss
- Search Type: Search All
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2023-27206 |
A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter. Published: March 09, 2023; 4:15:11 PM -0500 |
V3.1: 6.1 MEDIUM V2.0:(not available) |
| CVE-2023-1286 |
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19. Published: March 09, 2023; 6:15:10 AM -0500 |
V3.1: 4.8 MEDIUM V2.0:(not available) |
| CVE-2023-1275 |
A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the file /osms/assets/plugins/jquery-validation-1.11.1/demo/captcha/index.php of the component CAPTCHA Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222598 is the identifier assigned to this vulnerability. Published: March 08, 2023; 1:15:11 PM -0500 |
V3.1: 6.1 MEDIUM V2.0:(not available) |
| CVE-2023-26952 |
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module. Published: March 08, 2023; 9:15:09 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2023-26950 |
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module. Published: March 08, 2023; 8:15:10 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2023-24657 |
phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php. Published: March 08, 2023; 1:15:44 AM -0500 |
V3.1: 6.1 MEDIUM V2.0:(not available) |
| CVE-2023-26953 |
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module. Published: March 07, 2023; 10:15:11 AM -0500 |
V3.1: 4.8 MEDIUM V2.0:(not available) |
| CVE-2023-1254 |
A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file birthing_print.php. The manipulation of the argument birth_id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222484. Published: March 07, 2023; 10:15:11 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2021-44197 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technologies Student Information Management System.This issue affects Student Information Management System: before 20211126. Published: March 07, 2023; 9:15:09 AM -0500 |
V3.1: 6.1 MEDIUM V2.0:(not available) |
| CVE-2021-44196 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technologies Student Information Management System.This issue affects Student Information Management System: before 20211126. Published: March 07, 2023; 9:15:09 AM -0500 |
V3.1: 6.1 MEDIUM V2.0:(not available) |
| CVE-2023-26955 |
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module. Published: March 07, 2023; 8:15:10 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2023-26954 |
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module. Published: March 07, 2023; 8:15:10 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2023-1245 |
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Published: March 07, 2023; 3:15:10 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2023-1244 |
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Published: March 07, 2023; 3:15:09 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2023-1243 |
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Published: March 07, 2023; 3:15:09 AM -0500 |
V3.1: 4.8 MEDIUM V2.0:(not available) |
| CVE-2023-1242 |
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Published: March 07, 2023; 3:15:09 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2023-1241 |
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Published: March 07, 2023; 3:15:09 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2023-1240 |
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Published: March 07, 2023; 3:15:09 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |
| CVE-2023-1239 |
Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6. Published: March 07, 2023; 3:15:09 AM -0500 |
V3.1: 4.8 MEDIUM V2.0:(not available) |
| CVE-2023-1238 |
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Published: March 07, 2023; 3:15:09 AM -0500 |
V3.1: 5.4 MEDIUM V2.0:(not available) |