CWE-79

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC allows an unauthenticat

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7

SAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled inputs which may lead

Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker

chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The ACF Photo Gallery Field WordPress plugin before 1.7.5 does not sanitise and escape the post parameter in the include

The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS.

When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to impr

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of t

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.

NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting)

As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" t

Cross-site Scripting (XSS) - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0.

Cross Site Scripting (XSS) vulnerability exists in index.html in AFI WebACMS through 2.1.0 via the the ID parameter.

Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup

AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.25 does not escape t

The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it

The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type pa

The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it b

The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the hi

The Tutor LMS WordPress plugin before 1.9.12 does not escape the search parameter before outputting it back in an attrib

The Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) WordPress plugin before 9.7

The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error paramete

The Orders Tracking for WooCommerce WordPress plugin before 1.1.10 does not sanitise and escape the file_url before outp

The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests l

The Contact Form Entries WordPress plugin before 1.2.4 does not sanitise and escape various parameters, such as form_id,

The Contact Form Entries WordPress plugin before 1.1.7 does not validate, sanitise and escape the IP address retrieved v

The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outp

Cross Site Scripting (XSS) in Sourcecodester The Electric Billing Management System 1.0 by oretnom23, allows attackers t

Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, al

Cross Site Scripting (XSS) in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) by oretnom23, allows attackers

An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript c

An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to ref

A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickn

/usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP ec

GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cr

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists whic

A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that