CWE-79

A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or

A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a J

A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploadin

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't

Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a clien

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6

ghtml is software that uses tagged templates for template engine functionality. It is possible to introduce user-control

eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular use

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode t

QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site S

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J-Web of Junipe

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This

Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handli

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php.

Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via t

DataLens is a business intelligence and data visualization system. A specifically crafted request allowed the creation o

Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code

Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software

iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is

iTop is an IT service management platform. When displaying/editing the user's personal tokens, XSS attacks are possible

Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability. This vulner

The WebTop package for NethServer 7 and 8 allows stored XSS (for example, via the Subject field if an e-mail message).

Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malici

Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malici

Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. There is a stored

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?m

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mud

Inappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exp

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter

The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uplo

A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users

A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.ph

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email S

ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may

Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the

Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-

Zusam is a free and open-source way to self-host private forums. Prior to version 0.5.6, specially crafted SVG files upl

Combodo iTop is a simple, web based IT Service Management tool. When displaying page Run queries Cross-site Scripting (X

Combodo iTop is a simple, web based IT Service Management tool. When displaying pages/ajax.searchform.php XSS are possib

Combodo iTop is a simple, web based IT Service Management tool. When displaying pages/ajax.render.php XSS are possible f

Combodo iTop is a simple, web based IT Service Management tool. By filling malicious code in a CSV content, an Cross-sit

Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker t

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload

ZITADEL users can upload their own avatar image and various image types are allowed. Due to a missing check, an attacker

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 befor

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSigh

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting f