CWE-79

CVE-2023-22333

February 22, 2023 by godfreyd94

Cross-site scripting vulnerability in EasyMail 2.00.130 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

CVE-2023-22373

February 22, 2023 by godfreyd94

Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an arbitrary script and obtain the sensitive information.

CVE-2023-21434

February 22, 2023 by godfreyd94

Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web page.

CVE-2023-0810

February 22, 2023 by godfreyd94

Cross-site Scripting (XSS) – Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11.

CVE-2023-0827

February 22, 2023 by godfreyd94

Cross-site Scripting (XSS) – Stored in GitHub repository pimcore/pimcore prior to 1.5.17.

A vulnerability classified as problematic was found in PHPCrazy 1.1.1. This vulnerability affects unknown code of the file admin/admin.php?action=users&mode=info&user=2. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221086 is the identifier assigned to this vulnerability.