Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 19:48:52 +0000 cnvd-2017-05485 https://db.gcve.eu/vuln/cnvd-2017-05485 cnvd-2017-05485 https://db.gcve.eu/vuln/cnvd-2017-05485 fkie_cve-2017-7390 https://db.gcve.eu/vuln/fkie_cve-2017-7390 <p>A Cross-Site Scripting (XSS) was discovered in &#39;SocialNetwork v1.2.1&#39;. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the &#39;SocialNetwork-andrea/app/template/pw_forgot.php&#39; URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.</p> <p>A Cross-Site Scripting (XSS) was discovered in &#39;SocialNetwork v1.2.1&#39;. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the &#39;SocialNetwork-andrea/app/template/pw_forgot.php&#39; URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.</p> https://db.gcve.eu/vuln/fkie_cve-2017-7390 GHSA-3fm8-7gpf-p8fm — SocialNetwork Cross-Site Scripting (XSS) vulnerability https://db.gcve.eu/vuln/ghsa-3fm8-7gpf-p8fm <p><strong>Affected:</strong> Packagist: movingbytes/social-network</p> <p>A Cross-Site Scripting (XSS) was discovered in &#39;SocialNetwork v1.2.1&#39;. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the &#39;SocialNetwork-andrea/app/template/pw_forgot.php&#39; URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. A patch for the vulnerability is available at https://github.com/andreas83/SocialNetwork/commit/1b0799d08fda2f3099beaae1234b8b468deb8db1</p> <p><strong>Affected:</strong> Packagist: movingbytes/social-network</p> <p>A Cross-Site Scripting (XSS) was discovered in &#39;SocialNetwork v1.2.1&#39;. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the &#39;SocialNetwork-andrea/app/template/pw_forgot.php&#39; URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. A patch for the vulnerability is available at https://github.com/andreas83/SocialNetwork/commit/1b0799d08fda2f3099beaae1234b8b468deb8db1</p> https://db.gcve.eu/vuln/ghsa-3fm8-7gpf-p8fm gsd-2017-7390 https://db.gcve.eu/vuln/gsd-2017-7390 gsd-2017-7390 https://db.gcve.eu/vuln/gsd-2017-7390