CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism IT Systems U

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Max Bond Code Inse

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvialoSimple Enví

Static Web Server (SWS) is a tiny and fast production-ready web server suitable to serve static web files or assets. In

A vulnerability has been found in FAST/TOOLS and CI Server. The affected product's WEB HMI server's function to process

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooC

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Optemiz XPl

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Registratio

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a secu

There is a Cross-site scripting (XSS)  vulnerability in ZTE MF258. Due to insufficient input validation of SMS interfac

Dell Unity, version(s) 5.3 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-

Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A remote authenticated malic

iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fie

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field wh

NocoDB is software for building databases as spreadsheets. Starting in verson 0.202.6 and prior to version 0.202.10, an

Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in `fo

Solidus <= 4.3.4 is affected by a Stored Cross-Site Scripting vulnerability in the order tracking URL.

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6

Cacti is an open source performance and fault management framework. The `title` parameter is not properly sanitized when

Cacti is an open source performance and fault management framework. The`consolenewsection` parameter is not properly san

Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

Missing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers for users that view a

Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker t

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could al

The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary

A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WPCS –

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability co

The Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) plugin for WordPress is vulnerabl

The FileBird plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported folder titles in all version

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section.

A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authentic

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the progress bar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PDF Embedder allow

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The `email` field

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-pri

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scrip

A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbit

TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Port Forwarding under

The Bannerlid WordPress plugin through 1.1.0 does not escape generated URLs before outputting them in attributes, leadin

Sidekiq is simple, efficient background processing for Ruby. Sidekiq is reflected XSS vulnerability. The value of substr

The Where Did You Hear About Us Checkout Field for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixel Industry Twe

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.

A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.cl

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php.

The LuckyWP Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'single' module i

The Newspaper theme for WordPress is vulnerable to Stored Cross-Site Scripting via attachment meta in the archive page i