CVE-2019-18345

CRITICAL Year: 2019
CVSS v3 Score
9.3
Critical
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-79
View all →

Vulnerability Description

A reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter without encoding. If a user visits an attacker-supplied link, the attacker can view all data the attacked user can view, as well as perform all actions in the name of the user. If the user is an administrator, the attacker can for example add a new admin user to gain full access to the application.

Related Vulnerabilities

CVE-2014-3919

CRITICAL
CVSS:9.3(Critical)

A vulnerability exists in Netgear CG3100 devices before 3.9.2421.13.mp3 V0027 via an embed malicious script in an unspecified page, which could let a malicious user obtain sensitive information.

CWE-792014

CVE-2019-17535

CRITICAL
CVSS:9.3(Critical)

Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647.

CWE-792019

CVE-2020-15178

CRITICAL
CVSS:9.3(Critical)

In PrestaShop contactform module (prestashop/contactform) before version 4.3.0, an attacker is able to inject JavaScript while using the contact form. The `message` field was incorrectly unescaped, po...

CWE-792020

CVE-2020-3955

CRITICAL
CVSS:9.3(Critical)

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluate...

CWE-792020

CVE-2021-0268

CRITICAL
CVSS:9.3(Critical)

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') weakness in J-web of Juniper Networks Junos OS leads to buffer overflows, segment faults, or other impacts, whi...

CWE-792021

CVE-2022-1231

CRITICAL
CVSS:9.3(Critical)

XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges fro...

CWE-792022