CVE Vulnerability

CWE-79

CVE-2020-18158

by

Cross Site Scripting (XSS) vulnerability in HuCart 5.7.4 via nickname in index.php.

CVE-2020-18165

by

Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the “Website SEO Keywords” field on the page “admin/info.php?shuyu”.

CVE-2020-18167

by

Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the “Homepage Introduction” field of component “admin/info.php?shuyu”.

CVE-2020-18194

by

Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post.

CVE-2020-18221

by

Cross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute arbitrary code by injecting commands during block rendering of a mathematical formula.

CVE-2020-18022

by

Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the “ewebeditor3.1.1kindeditor.js” component.