CWE-79

Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arb

Archer 6.x through 6.9 SP3 (6.9.3.0) contains a reflected XSS vulnerability. A remote authenticated malicious Archer use

Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross

A stored cross-site scripting (XSS) vulnerability in the addNewPost component of OrangeHRM v4.10.1 allows attackers to e

Canarytokens is an open source tool which helps track activity and actions on your network. A Cross-Site Scripting vulne

Bookwyrm is an open source social reading and reviewing program. Versions of Bookwyrm prior to 0.4.1 did not properly sa

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that pro

Querybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field

Silverware Games is a social network where people can play games online. Users can attach URLs to YouTube videos, the si

svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-

A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 can store a script that could impact

Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual

DMP Roadmap before 3.0.4 allows XSS.

The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud serv

The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_acti

The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_notice parameter before o

The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_delete_role parameter bef

The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_create_products_xml_resul

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the searc

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestam

The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it

The Booking Calendar WordPress plugin before 8.9.2 does not sanitise and escape the booking_type parameter before output

Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0.4.380.10931 can lead to

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript

Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.

A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Sof

Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site sc

A DOM-based cross-site scripting (XSS) vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrar

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets

The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should m

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scrip

The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to

Cross-site scripting (XSS) vulnerability in index.php in emlog version <= pro-1.0.7 allows remote attackers to inject ar

Insta HMS before 12.4.10 is vulnerable to XSS because of improper validation of user-supplied input by multiple scripts.

Kentico Xperience 13.0.44 allows XSS via an XML document to the Media Libraries subsystem.

The WOOCS WordPress plugin before 1.3.7.3 does not sanitise and escape the custom_prices parameter before outputting it

The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulner

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All vers

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_proce

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,