CWE-79

Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with e

Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine c

Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine

Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary co

Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the cate

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability,

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability,

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered

A cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate pr

Cross-Site Scripting vulnerability in BuddyBoss 2.2.9 version , which could allow a local attacker with basic privile

Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 through 7.4.3.87,

Multiple stored cross-site scripting (XSS) vulnerabilities in the fragment components in Liferay Portal 7.4.2 through 7.

Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP

Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cle

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.plat

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.plat

ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a hi

A logic error when using mb_strpos() to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass

Cross-site scripting (XSS) vulnerability in Invoice Edit Page in Bitrix24 22.0.300 allows attackers to execute arbitrar

XWiki Platform is a generic wiki platform. Starting in version 12.10, a user without script rights can introduce a store

XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't prop

XWiki Commons are technical libraries common to several other top level XWiki projects. A user without script rights can

Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with comment

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users

Discourse is an open source platform for community discussion. Versions prior to 2.8.13 (stable), 3.0.0.beta16 (beta) an

TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected

An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.7

An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortin

An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through 7.0.

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able

A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges.

A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versio

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versio

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versio

The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of th

Microsoft SharePoint Server Spoofing Vulnerability

​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to i

7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)

Plesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting. A malicious subscription owner (either a cu

Home assistant is an open source home automation. The Home Assistant login page allows users to use their local Home Ass

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, when displaying `pa

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on `pages/UI.php`,

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to