CherryTree 1.0.2.0 download the new version

This vulnerability allows a remote attacker to store a malicious JavaScript payload in the 'lp_admin.php' file in the 'question' and 'item' parameters.

Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4. Then, when viewed by a properly authenticated administrator, the JavaScript payload executes and disguises all associated actions as performed by that unsuspecting authenticated administrator.

Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console.Ī DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they view a specifically crafted link to the PAN-OS web interface.Ī cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface.

CherryTree 1.0.2.0 download the new version