Show filters
25 Total Results
Displaying 1-10 of 25
Sort by:
Attacker Value
Unknown
CVE-2022-44962
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /calendar/viewcalendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject field.
0
Attacker Value
Unknown
CVE-2022-44961
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /forums/editforum.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2022-44960
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /general/search.php?searchtype=simple. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search field.
0
Attacker Value
Unknown
CVE-2022-44959
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /meetings/listmeetings.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2022-44957
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /clients/listclients.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2022-44956
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /projects/listprojects.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2022-44955
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the Chat function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Messages field.
0
Attacker Value
Unknown
CVE-2022-44954
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /contacts/listcontacts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name field after clicking "Add".
0
Attacker Value
Unknown
CVE-2022-44953
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /linkedcontent/listfiles.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field after clicking "Add".
0
Attacker Value
Unknown
CVE-2022-44291
Disclosure Date: December 02, 2022 (last updated February 24, 2025)
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php.
0
