Cross-Site Scripting

eXo Chat cross-site scripting | CVE-2022-4902

February 12, 2023

NAME__________eXo Chat cross-site scriptingPlatforms Affected:Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________eXo Chat is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

5 Anker Connect Plugin for WordPress cross-site scripting | CVE-2022-30545

February 12, 2023

NAME__________5 Anker Connect Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress 5 Anker Connect plugin for WordPress 1.2.6Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________5 Anker...

LogicalDOC Enterprise Edition and LogicalDOC Community Edition cross-site scripting | CVE-2022-47417

February 12, 2023

NAME__________LogicalDOC Enterprise Edition and LogicalDOC Community Edition cross-site scriptingPlatforms Affected:Risk Level:7.2Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________LogicalDOC Enterprise Edition and LogicalDOC Community Edition are...

LogicalDOC Enterprise Edition cross-site scripting | CVE-2022-47416

February 12, 2023

NAME__________LogicalDOC Enterprise Edition cross-site scriptingPlatforms Affected:Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________LogicalDOC Enterprise Edition is vulnerable to cross-site scripting, caused by improper validation...

Nextcloud Desktop cross-site scripting | CVE-2023-23942

February 11, 2023

NAME__________Nextcloud Desktop cross-site scriptingPlatforms Affected:Risk Level:3.9Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Nextcloud Desktop is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Synopsys Coverity Connect cross-site scripting | CVE-2023-23849

February 9, 2023

NAME__________Synopsys Coverity Connect cross-site scriptingPlatforms Affected:Risk Level:8.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Synopsys Coverity Connect is vulnerable to cross-site scripting, caused by improper validation...

TYPO3 cross-site scripting | CVE-2023-24814

February 9, 2023

NAME__________TYPO3 cross-site scriptingPlatforms Affected:TYPO3 TYPO3 12.1.3Risk Level:8.8Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________TYPO3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Delta Electronics DX-2100L1-CN cross-site scripting | CVE-2023-0432

February 3, 2023

NAME__________Delta Electronics DX-2100L1-CN cross-site scriptingPlatforms Affected:Risk Level:9Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Delta Electronics DX-2100L1-CN is vulnerable to cross-site scripting, caused by improper validation...

Ampache cross-site scripting | CVE-2023-0606

February 2, 2023

NAME__________Ampache cross-site scriptingPlatforms Affected:Risk Level:9.3Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Ampache is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

Discourse cross-site scripting | CVE-2023-22468

January 29, 2023

NAME__________Discourse cross-site scriptingPlatforms Affected:Discourse Discourse 3.0.0 Discourse Discourse 3.1.0.beta1Risk Level:8.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Discourse is vulnerable to cross-site scripting, caused by improper...

Book Store Management System cross-site scripting | CVE-2023-23024

January 27, 2023

NAME__________Book Store Management System cross-site scriptingPlatforms Affected:Risk Level:7.2Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Book Store Management System is vulnerable to cross-site scripting, caused by...

Tenable.sc cross-site scripting | CVE-2023-24494

January 27, 2023

NAME__________Tenable.sc cross-site scriptingPlatforms Affected:Tenable Tenable.sc 5.23.1Risk Level:8.3Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Tenable.sc is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Broadcom Symantec Identity Manager cross-site scripting | CVE-2023-23949

January 27, 2023

NAME__________Broadcom Symantec Identity Manager cross-site scriptingPlatforms Affected:Broadcom Symantec Identity Manager 14.3 Broadcom Symantec Identity Manager 14.4Risk Level:8.1Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Broadcom Symantec...

LISTSERV cross-site scripting | CVE-2022-39195

January 21, 2023

NAME__________LISTSERV cross-site scriptingPlatforms Affected:Risk Level:7.2Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________LISTSERV is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

phpMyFAQ cross-site scripting | CVE-2023-0309

January 18, 2023

NAME__________phpMyFAQ cross-site scriptingPlatforms Affected:Risk Level:8.6Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________phpMyFAQ is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

phpMyFAQ cross-site scripting | CVE-2023-0306

January 18, 2023

NAME__________phpMyFAQ cross-site scriptingPlatforms Affected:Risk Level:9.1Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________phpMyFAQ is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

phpMyFAQ cross-site scripting | CVE-2023-0312

January 18, 2023

phpMyFAQ cross-site scripting | CVE-2023-0310

January 18, 2023

NAME__________phpMyFAQ cross-site scriptingPlatforms Affected:Risk Level:9.8Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________phpMyFAQ is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

Gatsby cross-site scripting | CVE-2023-22491

January 17, 2023

NAME__________Gatsby cross-site scriptingPlatforms Affected:Gatsby Gatsby 5.25.0 Gatsby Gatsby 6.3.1Risk Level:8.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Gatsby is vulnerable to cross-site scripting, caused by improper...

Cisco Industrial Network Director information disclosure | CVE-2023-20038

January 12, 2023

NAME__________Cisco Industrial Network Director information disclosurePlatforms Affected:Cisco Industrial Network DirectorRisk Level:8.8Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Cisco Industrial Network Director could allow a local...

Siemens Mendix SAML Module cross-site scripting | CVE-2022-46823

January 11, 2023

NAME__________Siemens Mendix SAML Module cross-site scriptingPlatforms Affected:Risk Level:9.3Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Siemens Mendix SAML Module is vulnerable to cross-site scripting. A remote...

Node.js sanitize-svg module cross-site scripting | CVE-2023-22461

January 10, 2023

NAME__________Node.js sanitize-svg module cross-site scriptingPlatforms Affected:Risk Level:7.6Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Node.js sanitize-svg module is vulnerable to cross-site scripting, caused by improper validation...

Discourse cross-site scripting | CVE-2023-22454

January 7, 2023

NAME__________Discourse cross-site scriptingPlatforms Affected:Risk Level:8Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Discourse is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

TrueConf Server SQL Injection | CVE-2022-46764

January 1, 2023

NAME TrueConf Server SQL Injection Platforms Affected:TrueConf TrueConf Server 5.2.0.10225Risk Level:7.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION TrueConf Server is vulnerable to SQL injection....

Cross-Site Scripting

eXo Chat cross-site scripting | CVE-2022-4902

5 Anker Connect Plugin for WordPress cross-site scripting | CVE-2022-30545

LogicalDOC Enterprise Edition and LogicalDOC Community Edition cross-site scripting | CVE-2022-47417

LogicalDOC Enterprise Edition cross-site scripting | CVE-2022-47416

Nextcloud Desktop cross-site scripting | CVE-2023-23942

Synopsys Coverity Connect cross-site scripting | CVE-2023-23849

TYPO3 cross-site scripting | CVE-2023-24814

Delta Electronics DX-2100L1-CN cross-site scripting | CVE-2023-0432

Ampache cross-site scripting | CVE-2023-0606

Discourse cross-site scripting | CVE-2023-22468

Book Store Management System cross-site scripting | CVE-2023-23024

Tenable.sc cross-site scripting | CVE-2023-24494

Broadcom Symantec Identity Manager cross-site scripting | CVE-2023-23949

LISTSERV cross-site scripting | CVE-2022-39195

phpMyFAQ cross-site scripting | CVE-2023-0309

phpMyFAQ cross-site scripting | CVE-2023-0306

phpMyFAQ cross-site scripting | CVE-2023-0312

phpMyFAQ cross-site scripting | CVE-2023-0310

Gatsby cross-site scripting | CVE-2023-22491

Cisco Industrial Network Director information disclosure | CVE-2023-20038

Siemens Mendix SAML Module cross-site scripting | CVE-2022-46823

Node.js sanitize-svg module cross-site scripting | CVE-2023-22461

Discourse cross-site scripting | CVE-2023-22454

TrueConf Server SQL Injection | CVE-2022-46764

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

You may have missed