Vendor-------------------------------------------------Navy Federal - (https://www.navyfederal.org/Product-------------------------------------------------Front pubic facing applicationCredit-------------------------------------------------Arthrocyberhttp://arthrocyber.com/research/#finding_7David ReyesVulnerability Summary-----------------------------------

Drupal maintainers addressed several information disclosure and cross-site scripting (XSS) flaws in the popular content management system (CMS). Drupal maintainers addressed several information disclosure and cross-site scripting (XSS) vulnerabilities in the popular content management system (CMS). The most severe issue, tracked as CVE-2020-13668, is a

Several information disclosure and cross-site scripting (XSS) vulnerabilities, including one rated critical, have been patched this week in the Drupal content management system (CMS).The most serious of the flaws is CVE-2020-13668, a critical XSS issue affecting Drupal 8 and 9. It’s worth noting that Drupal uses the NIST Common Misuse Scoring System to deter

SEC Consult Vulnerability Lab Security Advisory < 20200728-0 >======================================================================= title: Stored Cross-Site Scripting (XSS) Vulnerability product: Namirial SIGNificant SignAnyWhere vulnerable version: v6.10.60.25434 (SSP v4.22.60.25434) v6.10.100.25817 (SSP v

An XSS vulnerability in the KingComposer page builder for WordPress impacts 100,000 websites using the WordPress plugin.  Researchers at Wordfence Threat Intelligence team discovered a reflected cross-site scripting (XSS) vulnerability, tracked as CVE-2020-15299, in the KingComposer WordPress plugin that potentially impacts 100,000 websites.  KingCompo

############################################################### COMPASS SECURITY ADVISORY# https://www.compass-security.com/research/advisories/################################################################ Product: Froala WYSIWYG HTML Editor# Vendor: Froala# CSNC ID: CSNC-2020-004# CVE ID: CVE-2019-19935# Subject: DOM XSS in Froala WYSIWYG HTML Edi

SEC Consult Vulnerability Lab Security Advisory < 20200701-0 >======================================================================= title: Reflected Cross-Site Scripting (XSS) Vulnerability product: EQDKP Plus CMS vulnerable version: <= 2.3.29 fixed version: 2.3.30 CVE number: - impact: Low

I. VULNERABILITY-------------------------WebUntis 2020.12.1 - (Authenticated) Cross Site ScriptingII. BACKGROUND-------------------------WebUntis is a tool for schools and universities to deliver electronic timetables to their students. Depending from the activated modules it does also contain sensitive information within the integrated class-register and gr

Document Title:===============SuperBackup v2.0.5 iOS - (VCF) Persistent XSS VulnerabilityReferences (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2202Release Date:=============2020-04-15Vulnerability Laboratory ID (VL-ID):====================================2202Common Vulnerability Scoring System:==========================

Document Title:===============WSO2 API Manager Stored XSS VulnerabilityCommon Vulnerability Scoring System:====================================5.4CVE :===================N/ASecurity Advisory :===================https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0700Latest Release after Fixing Vuln:===================================V 3.1.0 (h

SEC Consult Vulnerability Lab Security Advisory < 20200407-0 >======================================================================= title: Multiple XSS vulnerabilities product: TAO Open Source Assessment Platform vulnerable version: 3.3.0 RC2 fixed version: - CVE number: - impact: medium home

In this blog post, we will look at some simple JavaScript tricks for creating weaponized cross-site scripting (XSS) payloads. If less reading more videoing is your thing, watch this topic in webinar form here: https://www.trustedsec.com/events/webinar-popping-shells-instead-of-alert-boxes-weaponizing-xss-for-fun-and-profit/ Often, penetration testers

Title: FIBARO System Home Center v5.021 Remote File Include XSS Advisory ID: ZSL-2020-5563 Type: Local/Remote Impact: Cross-Site Scripting Risk: (3/5) Release Date: 22.03.2020SummaryImagine that you live in a house where everything happens by itself.FIBARO Smart Home take

Drupal developers released security updates for versions 8.8.x and 8.7.x that fix two XSS vulnerabilities affecting the CKEditor library. The Drupal development team has released security updates for versions 8.8.x and 8.7.x that address two XSS vulnerabilities that affect the CKEditor library. CKEditor is the far superior successor of FCKeditor, it i

The developers of the Drupal content management system (CMS) announced on Wednesday that updates for versions 8.8.x and 8.7.x address a couple of vulnerabilities affecting the CKEditor library.CKEditor is a popular open source WYSIWYG editor that is highly configurable and has hundreds of features. Drupal uses CKEditor and it has decided to update it to vers