CVE-2021-33040

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS.

Source: CVE-2021-33040

CVE-2022-0257

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

Source: CVE-2022-0257

CVE-2022-0256

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

Source: CVE-2022-0256

CVE-2022-0258

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

Source: CVE-2022-0258

CVE-2022-0253

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

Source: CVE-2022-0253

CVE-2021-3862

icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

Source: CVE-2021-3862

CVE-2022-0240

mruby is vulnerable to NULL Pointer Dereference

Source: CVE-2022-0240

CVE-2021-25061

The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page.

Source: CVE-2021-25061

CVE-2021-25065

The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.

Source: CVE-2021-25065

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

Source: CVE-2021-4164