Parallels : Security Vulnerabilities, CVEs, (XSS) CVSS score >= 1
Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.
Max CVSS
6.1
EPSS Score
0.09%
Published
2022-05-16
Updated
2022-05-25
Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.
Max CVSS
6.1
EPSS Score
0.11%
Published
2019-11-13
Updated
2019-11-14
Cross-site scripting (XSS) vulnerability in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Panel 10.4.4_build20111103.18 allows remote attackers to inject arbitrary web script or HTML via the login parameter to preferences.html.
Max CVSS
4.3
EPSS Score
0.10%
Published
2011-12-16
Updated
2012-05-13
Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/update/settings/ and certain other files.
Max CVSS
4.3
EPSS Score
0.13%
Published
2011-12-16
Updated
2017-08-29
Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Wizard/Edit/Modules/Image and certain other files.
Max CVSS
4.3
EPSS Score
0.13%
Published
2011-12-16
Updated
2017-08-29
Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by smb/app/available/id/apscatalog/ and certain other files.
Max CVSS
4.3
EPSS Score
0.13%
Published
2011-12-16
Updated
2017-08-29
Multiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/index.php/default and certain other files.
Max CVSS
4.3
EPSS Score
0.13%
Published
2011-12-16
Updated
2019-04-22
Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by smb/user/create and certain other files.
Max CVSS
4.3
EPSS Score
0.19%
Published
2011-12-16
Updated
2019-04-22
Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/health/ and certain other files.
Max CVSS
4.3
EPSS Score
0.13%
Published
2011-12-16
Updated
2019-04-22
Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3) login parameters.
Max CVSS
4.3
EPSS Score
0.42%
Published
2009-03-13
Updated
2017-08-17
10 vulnerabilities found