CWE-79

ShineLan-X contains a stored cross site scripting (XSS) vulnerability in the Plant Name field. A HTML payload will be di

In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated us

grav before v1.7.49.5 has a Stored Cross-Site Scripting (Stored XSS) vulnerability in the page editing functionality. An

Webedition CMS v2.9.8.8 contains a stored cross-site scripting vulnerability that allows authenticated users to upload m

Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject malicious scripts wh

Perch CMS 3.2 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious S

Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject maliciou

In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup

In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab

In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page

Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to in

Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject ma

WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malic

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Managemen

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality.

ChurchCRM is an open-source church management system. A privilege escalation vulnerability exists in ChurchCRM prior to

ChurchCRM is an open-source church management system. A stored cross-site scripting (XSS) vulnerability exists in Church

ChurchCRM is an open-source church management system. In versions prior to 6.5.4, there is a Stored Cross-Site Scripting

WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malici

WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malici

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows auth

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible thro

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible throug

PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to in

PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to uplo

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicio

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via error

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to upload files with spoofed Content-T

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form r

A stored cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts

A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scrip

A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scrip

RockMongo 1.1.7 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts t

TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject m

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form v

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Ch

A Reflected Cross-Site Scripting (XSS) vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An

WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malic

The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting (XSS) in the Content Search module.

myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the template management system that allows au

myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum management system that allows authe

myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum announcement system that allows aut

Orangescrum 1.8.0 contains multiple cross-site scripting vulnerabilities that allow authenticated attackers to inject ma

CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in

CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Echo Call C

Gitea before 1.22.2 allows XSS because the search input box (for creating tags and branches) is v-html instead of v-text