CWE-79

bgERP v22.31 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter.

Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows

SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user-controlled inputs, resulting i

Due to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 75

SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an

Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 7

Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740

Due to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702, 731, 740, 750, 751, 75

SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756,

A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime ver

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandor

Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, ti

Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] i

Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t

Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t

Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t

Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t

Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.

A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags s

Cross-site Scripting (XSS) - Generic in GitHub repository nuxt/framework prior to 3.2.1.

A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in blog search. A

The dropdown menu in jspreadsheet before v4.6.0 was discovered to be vulnerable to cross-site scripting (XSS).

jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site sc

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting

Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.2

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java.

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in the

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting

Vditor is a browser-side Markdown editor. Versions prior to 3.8.7 are vulnerable to copy-paste cross-site scripting (XSS

Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to

Cockpit is a content management system that allows addition of content management functionality to any site. In versions

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-ht

The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender v

iziModal is a modal plugin with jQuery. Versions prior to 1.6.1 are vulnerable to cross-site scripting (XSS) when handli

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administra

The Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ paramet

pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.

If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).

sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved ema

Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router allows attacker to obtain sensitive information vi

The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that

Part-DB is an open source inventory management system for your electronic components. User input was found not being pro

The Custom Add User WordPress plugin through 2.0.2 does not sanitise and escape a parameter before outputting it back in

The GN Publisher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in version

Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javas

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote inje