Search Vulnerabilities

Cal.com through 4.7.15 Cross-Site Scripting via booking questions

Cal.com through 4.7.15 Cross-Site Scripting via booking questions

dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages

Dashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7

PeerTube: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

SiYuan: Store XSS To Rce via Asset.render

HTML Injection in Armiya Technologies' Access Control System

Vulnerabilities found in Watson Data Intelligence

Apache Tomcat: XSS in number guess example

WordPress Auros Core plugin <= 5.3.1 - Content Injection vulnerability

Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF editor is opened in the br...

Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs

Content injected to PDF rendering contexts could, in many places, include HTML content including <img> tags

Stored XSS in ticket confirmation page

Stored XSS in pretix-pages

Stored XSS in pretix-digital

Gogs: Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS

Astro: Reflected XSS via unescaped slot name

Apache Atlas: Stored XSS in Create Entity page