Archive
10 August 2020
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
High 8.8
XSS in MyBB
In MyBB before version 1.8.24, the custom MyCode (BBCode) for the visual editor doesn't escape input properly when rendering HTML, resulting in a DOM-based XSS vulnerability. The weakness can be exploited by pointing a victim to a page where the visual editor…
-
High —
Cross-site scripting vulnerability in TinyMCE
TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard or APIs to insert content into the editor.
-
High 7.5
Combodo iTop - Security Misconfiguration
A security misconfiguration exists in Combodo iTop, which can expose sensitive information.
-
High 7.4
Combodo iTop - Reflected XSS
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.
-
High 7.5
Combodo iTop - Broken Access Control
A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information.