Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2024-13283

Disclosure Date: January 09, 2025 (last updated January 10, 2025)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.
0
0
Attacker Value
Unknown

CVE-2006-1026

Disclosure Date: March 07, 2006 (last updated February 22, 2025)
JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID.
0
0