CWE-79

CVE-2023-22975

February 22, 2023 by godfreyd94

jfinal_cms 5.1.0 is vulnerable to Cross Site Scripting (XSS).

Cross Site Scripting (XSS) vulnerability in Ecommerce-CodeIgniter-Bootstrap thru commit d5904379ca55014c5df34c67deda982c73dc7fe5 (on Dec 27, 2022), allows attackers to execute arbitrary code via the languages and trans_load parameters in file add_product.php.

CVE-2023-23011

February 22, 2023 by godfreyd94

Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php.

CVE-2023-23012

February 22, 2023 by godfreyd94

Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php.

CVE-2023-23014

February 22, 2023 by godfreyd94

Cross Site Scripting (XSS) vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c (on Apr 23, 2021) via edit_store_name and edit_active inputs in file InventorySystem.php.

CVE-2023-23015

February 22, 2023 by godfreyd94

Cross Site Scripting (XSS) vulnerability in Kalkun 0.8.0 via username input in file User_model.php.