CWE-79

There is a Cross-site Scripting vulnerability in Esri Portal for ArcGIS Sites in versions 10.9 and below that may allow

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4.

Indico is an open source a general-purpose, web based event management tool. There is a Cross-Site-Scripting vulnerabili

IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG Fi

An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can cha

An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user

A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and

Tuleap is a free and open source suite to improve management of software development and collaboration. Prior to version

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset hav

A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated a

Jenkins 2.415 and earlier, LTS 2.401.2 and earlier does not sanitize or properly encode URLs in build logs when transfor

An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On the "Configuration -> Compliance -> Add a new compliance re

An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted fi

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16.

IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 are vulnerable to cross-sit

Vound Intella Connect 2.6.0.3 is vulnerable to stored Cross-site Scripting (XSS).

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Co

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users a

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users a

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the configu

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the System

Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, ti

Reflected XSS in business intelligence in Checkmk <2.2.0p8, <2.1.0p32, <2.0.0p38, <=1.6.0p30.

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting (XSS) when an authenticated user interacts with ce

Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arb

An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting fr

Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary code via the descriptio

Frontend themes are defined by user-controllable jslob settings and could point to a malicious resource which gets proce

The users clientID at "application passwords" was not sanitized or escaped before being added to DOM. Malicious script c

The "upsell" widget for the portal allows to specify a product description. This description taken from a user-controlla

Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handler

The "OX Chat" web service did not specify a media-type when processing responses by external resources. Malicious script

The "OX Count" web service did not specify a media-type when processing responses by external resources. Malicious scrip

Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.

A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allow

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to exe

WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and o

WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2.

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an

Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3.

Insufficient input validation and sanitation in Weblog Category name, Website About and File Upload features in all vers

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Comm

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privi

Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a c

social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Ve

The Crash Reporter (crash_reporter.php) component of OPNsense Community Edition before 23.7 and Business Edition before

Auth. (subscriber+) Reflected Cross-site Scripting (XSS) vulnerability in Wpazure Themes Upfrontwp theme <= 1.1 versions