xss vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

XSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for paths....

Xss Hunter Express Project Xss Hunter Express

4.3

CVSSv2

A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special crafted URLs to pass as valid, although they carry XSS payloads. The affected versions are Apache Sling...

Apache Sling Xss Protection Api Apache Sling Xss Protection Api 2.0.0 Apache Sling Xss Protection Api Compat 1.1.0

4.3

CVSSv2

WordPress before 5.5.2 allows XSS associated with global variables....

Wordpress Wordpress

4.3

CVSSv2

WordPress before 5.5.2 allows stored XSS via post slugs....

Wordpress Wordpress1 Github repository available

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813....

Jenkins Jenkins Redhat Openshift

3.5

CVSSv2

Sage X3 Stored XSS Vulnerability on ‘Edit’ Page of User Profile. The ‘First name’, ‘Last name’, and ‘Email’ fields within the ‘Edit User’ page is vulnerable to a stored XSS sequence....

Sage Syracuse1 Article available

4.3

CVSSv2

ResourceSpace Reflected XSS vulnerability...

Montala Resourcespace Montala Resourcespace 9.6

4.3

CVSSv2

Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an...

Google Chrome3 Articles available

4.3

CVSSv2

In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML...

Google Chrome5 Github repositories available1 Article available

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812....

Jenkins Jenkins Redhat Openshift

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook