CWE-79

Reflected cross-site scripting vulnerability in GROWI v4.0.0 and earlier allows remote attackers to inject arbitrary scr

Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers,

OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via

app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment fi

Cross-site scripting (XSS) exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChoose

The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. This affects 3.9 to 3.9.1, 3.8

A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScr

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.0.1. Processing

The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary par

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitizati

In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to X

Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached throug

SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attack

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP hav

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have alr

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Stat

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Stat

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in System Co

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in certifica

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects

A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressP

Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.

OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple pa

OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple par

A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote att

A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and p

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store

EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inj

Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by

Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admi

Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in th

IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnera

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users

Cross Site Scripting (XSS) vulnerability in the Showtime2 Slideshow module in CMS Made Simple (CMSMS) 2.2.4.

Cross Site Scripting (XSS) vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pivot Table

Cross Site Scripting (XSS) vulnerability in Remote Report component under the Open menu in Flexmonster Pivot Table & Cha

Cross Site Scripting (XSS) vulnerability in the To OLAP (XMLA) component Under the Connect menu in Flexmonster Pivot Tab

Cross Site Scripting (XSS) vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Pivot Table &

The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary c

The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending

In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in a

A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote at