CWE-79

Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input vali

Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplan

Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplan

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Bl

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and d

Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scr

The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any insta

An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x

FlyCms through abbaa5a allows XSS via the permission management feature.

The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and inje

OWASP AntiSamy .NET is a library for performing cleansing of HTML coming from untrusted sources. Prior to version 1.2.0,

The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i

The POST SMTP WordPress plugin before 2.8.7 does not sanitise and escape the msg parameter before outputting it back in

APIIDA API Gateway Manager for Broadcom Layer7 v2023.2 is vulnerable to Cross Site Scripting (XSS).

TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote

TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attack

TinyMCE versions before 5.6.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote

ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from _request() is not

Cross Site Scripting (XSS) vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code v

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. Versio

govuk_tech_docs versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious Ja

Firefly III (aka firefly-iii) before 6.1.1 allows webhooks HTML Injection.

Cross Site Scripting (XSS) vulnerability in AVA teaching video application service platform version 3.1, allows remote a

The WP Crowdfunding WordPress plugin before 2.1.9 does not sanitise and escape a parameter before outputting it back in

The WP VR WordPress plugin before 8.3.15 does not authorisation and CSRF in a function hooked to admin_init, allowing un

The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting i

The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.28 does not properly protect most of its REST API r

easyXDM 2.5 allows XSS via the xdm_e parameter.

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary cod

Cross Site Scripting vulnerability in Follet School Solutions Destiny v.20_0_1_AU4 and later allows a remote attacker to

A Cross-Site Scripting (XSS) vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to

A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote atta

Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language param

member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header.

The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versi

The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘environment_mode’ pa

An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.4

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageSt

An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-

Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the l

User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS v

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It c

QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerab

An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Bui

The Advanced Woo Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search parameter in