CWE-79

A flaw has been found in projectsend up to r1720. Impacted is an unknown function of the component File Editor/Custom Do

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown funct

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function o

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown p

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple mult

A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /s

Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authent

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the fil

A security vulnerability has been detected in Eigenfocus up to 1.4.0. This vulnerability affects unknown code of the com

A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown funct

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Prior to 5.5.3, a stored HTML injecti

Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5

A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown

A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de5

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /

A weakness has been identified in Yealink SIP-T21P E2 52.84.0.15. Impacted is an unknown function of the component Local

A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T tel

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TAC Informa

A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. This issue affects so

A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0. This affects the function addCust

A security vulnerability has been detected in Qualitor up to 8.24.73. The impacted element is an unknown function of the

In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page

A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of

A security vulnerability has been detected in postmanlabs httpbin up to 0.6.1. This affects an unknown function of the f

A security flaw has been discovered in yourmaileyes MOOC up to 1.17. This affects the function subreview of the file moo

A vulnerability was identified in SohuTV CacheCloud up to 3.2.0. This affects the function index of the file src/main/ja

A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/

A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file s

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the funct

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appComma

A flaw has been found in SohuTV CacheCloud up to 3.2.0. The impacted element is the function redirectNoPower of the file

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doMa

A flaw has been found in SohuTV CacheCloud up to 3.2.0. This vulnerability affects the function index of the file src/ma

A security flaw has been discovered in sunhailin12315 product-review 商品评价系统 up to 91ead6890b4065bb45b7602d0d73348e75cb46

A weakness has been identified in zhujunliang3 work_platform up to 6bc5a50bb527ce27f7906d11ea6ec139beb79c31. This vulner

A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application

A security vulnerability has been detected in elinicksic Razgover up to db37dfc5c82f023a40f2f7834ded6633fb2b5262. This a

The drag-and-drop onto image (ddimageortext) question type required additional sanitizing to prevent a stored XSS risk.

CVE-2025-27706 is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to ver

CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with admin

The Sticky Side Buttons WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could all

Contao is an Open Source CMS. From version 4.0.0 to before 4.13.57, before 5.3.42, and before 5.6.5, it is possible to i

IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vuln

The Discourse Code Review Plugin allows users to review GitHub commits on Discourse. Prior to commit eed3a80, an attacke

A vulnerability, which was classified as problematic, was found in Comodo Dragon up to 134.0.6998.179. This affects an u

A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as proble

Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML code into a webpage, wi

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Commun