Xjzzzxx

The issue is related to a reflected XSS vulnerability in GLPI, a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician to exploit this vulnerability. This can allow a remote attacker to conduct a cross-site scripting (XSS) attack.

The issue is a Cross-Site Scripting (XSS) vulnerability found in the php/trip.php file. This allows for malicious scripts to be injected into the website, potentially leading to unauthorized access or control.

The issue is a Cross-Site Scripting (XSS) vulnerability. It occurs via the "php/submit.php" endpoint.

The issue is related to Cross-Site Scripting (XSS) via the php/settings.php file. This allows for potential malicious script execution. No information is provided about the estimated number of affected devices or real-world incidents.

The issue is related to a Cross-Site Scripting (XSS) vulnerability. It affects the `php/alsearch.php` file. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

The issue is a Cross Site Scripting (XSS) vulnerability found in the application/views/marks/add by url.php file. This allows for potential malicious script execution.

The issue is a Cross Site Scripting (XSS) vulnerability. It occurs through the `appadminimport-exportimport-load-data.php` file. This allows for potential malicious script execution.

A remote code execution (RCE) issue was discovered in RPi-Jukebox-RFID, allowing for potential code execution via the "htdocsmanageFilesFolders.php" endpoint.

A remote code execution vulnerability was discovered in RPi-Jukebox-RFID, allowing for potential unauthorized access and data compromise via the htdocstrackEdit.php file.

A remote code execution issue was discovered in RPi-Jukebox-RFID, allowing for potential code execution via the htdocsuserScripts.php file.

A remote code execution issue was discovered in RPi-Jukebox-RFID. The issue occurs via the "htdocs/api/playlist/appendFileToPlaylist.php" API endpoint.

A remote code execution (RCE) issue was discovered in RPi-Jukebox-RFID. The issue is related to the `htdocsinc.setWlanIpMail.php` file, which allows for remote code execution.

A remote code execution (RCE) issue was discovered in RPi-Jukebox-RFID. The issue is found in the htdocsincsetWifi.php file, allowing for remote code execution.

The issue is related to Cross Site Scripting (XSS) via the "api.php" endpoint. This means an attacker could potentially inject malicious scripts into the website, affecting users' sessions.

A cross-site scripting (XSS) issue exists in the `/login/disabled.php` component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `username` parameter.

A cross-site scripting (XSS) issue exists in the `/auth/AzureRedirect.php` component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `error description` parameter.

A cross-site scripting (XSS) issue in the `/managers/enable requests.php` component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `view` parameter.

A cross-site scripting (XSS) vulnerability in the component "/managers/multiple freeleech.php" of Gazelle allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `torrents` parameter.

A cross-site scripting (XSS) issue exists in the `/master/auth/OnedriveRedirect.php` component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `error description` parameter.

The issue allows for Directory Traversal via the `user/space/about.php` endpoint. This means an attacker could potentially access files outside the intended directory structure by manipulating the input to the vulnerable endpoint.