5 docs tagged with "HTML_Injection_Vulnerability"

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket.

Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New

admin/limits.php in Dolibarr 7.0.2 allows HTML injection, as demonstrated by the MAIN_MAX_DECIMALS_T

Gravitee API Management before 3.15.13 allows path traversal through HTML injection.

The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and inc