CWE-79

TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s cont

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Cross-

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been rated as problematic. This is

A vulnerability classified as problematic was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by thi

For an attacker with pre-existing access to send a signal to a workflow, the attacker can make the signal name a script

A vulnerability classified as problematic was found in SourceCodester Computer Laboratory Management System 1.0. This vu

A vulnerability has been found in iboss Secure Web Gateway up to 10.1 and classified as problematic. Affected by this vu

TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in MAC Filtering under t

A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML vi

Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom content being displayed when a u

The Call Now Button WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow

A vulnerability, which was classified as problematic, was found in MailCleaner up to 2023.03.14. Affected is an unknown

A vulnerability was found in MailCleaner up to 2023.03.14 and classified as problematic. Affected by this issue is some

A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification se

The NextGEN Gallery WordPress plugin before 3.59.1 does not sanitise and escape some of its settings, which could allow

A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects a

A Stored Cross-site Scripting (XSS) vulnerability in the "Import of organizational units and title of organizational uni

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as pro

A vulnerability classified as problematic has been found in EZ-Suite EZ-Partner 5. Affected is an unknown function of th

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Foru

A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by

The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could all

A vulnerability was found in Genexis Tilgin Fiber Home Gateway HG1522 CSx000-01_09_01_12. It has been declared as proble

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attacker

The DN Footer Contacts WordPress plugin before 1.6.3 does not sanitise and escape some of its settings, which could allo

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Human Resources)

A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulner

Zitadel is an open source identity management system. ZITADEL uses HTML for emails and renders certain information such

The Brizy – Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

A vulnerability, which was classified as problematic, has been found in OcoMon 4.0RC1/4.0/5.0RC1. This issue affects som

A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unkn

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Metagauss U

Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI sp

Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker

A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown pro

A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. Affected by this vu

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This a

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In Indi

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index o

A vulnerability classified as problematic was found in code-projects Online Shop Store 1.0. This vulnerability affects u

The AZIndex WordPress plugin through 0.8.1 does not have CSRF check in some places, and is missing sanitisation as well

A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects

A vulnerability classified as problematic was found in code-projects Inventory Management 1.0. This vulnerability affect

Cross Site Scripting (XSS) Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attac

A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the fil

Microsoft Edge (Chromium-based) Spoofing Vulnerability

A vulnerability classified as problematic was found in SourceCodester Online Railway Reservation System 1.0. This vulner