CVE Vulnerability

CWE-79

CVE-2018-20640

by

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field.

CVE-2018-20645

by

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

CVE-2018-20590

by

Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.

CVE-2018-20594

by

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

CVE-2018-20597

by

UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.

CVE-2018-20600

by

sadmincedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.