CWE-79

CVE-2020-13869

February 26, 2023 by

An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name.

February 26, 2023 by

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name.

February 26, 2023 by

Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php.

February 26, 2023 by

showAlert() in the administration panel in Bludit 3.12.0 allows XSS.

February 26, 2023 by

The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.

February 26, 2023 by

The SportsPress plugin before 2.7.2 for WordPress allows XSS.