CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,564)
page 1021 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-1000042 | Med | 0.40 | 6.1 | 0.01 | Jul 17, 2017 | Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name. | ||
| CVE-2017-1000038 | Med | 0.40 | 6.1 | 0.01 | Jul 17, 2017 | WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affected site | ||
| CVE-2017-1000035 | Med | 0.40 | 6.1 | 0.01 | Jul 17, 2017 | Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack | ||
| CVE-2017-1000033 | Med | 0.40 | 6.1 | 0.02 | Jul 17, 2017 | Wordpress Plugin Vospari Forms version < 1.4 is vulnerable to a reflected cross site scripting in the form submission resulting in javascript code execution in the context on the current user. | ||
| CVE-2017-1000032 | Med | 0.40 | 6.1 | 0.01 | Jul 17, 2017 | Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parent_id parameter to tree.php and drp_action parameter to data_sources.php. | ||
| CVE-2017-1000015 | Med | 0.40 | 6.1 | 0.01 | Jul 17, 2017 | phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters | ||
| CVE-2017-1000012 | Med | 0.40 | 6.1 | 0.01 | Jul 17, 2017 | MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user | ||
| CVE-2017-1000011 | Med | 0.40 | 6.1 | 0.01 | Jul 17, 2017 | MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information | ||
| CVE-2017-1000006 | Med | 0.40 | 6.1 | 0.01 | Jul 17, 2017 | Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue. | ||
| CVE-2017-1000005 | Med | 0.40 | 6.1 | 0.01 | Jul 17, 2017 | PHPMiniAdmin version 1.9.160630 is vulnerable to stored XSS in the name of databases, tables and columns resulting in potential account takeover and scraping of data (stealing data). | ||
| CVE-2017-11202 | Med | 0.40 | 6.1 | 0.01 | Jul 13, 2017 | FineCMS through 2017-07-12 allows XSS in visitors.php because JavaScript in visited URLs is not restricted either during logging or during the reading of logs, a different vulnerability than CVE-2017-11180. | ||
| CVE-2017-11198 | Med | 0.40 | 6.1 | 0.01 | Jul 13, 2017 | Cross-site scripting (XSS) vulnerability in /application/lib/ajax/get_image.php in FineCMS through 2017-07-12 allows remote attackers to inject arbitrary web script or HTML via the folder, id, or name parameter. | ||
| CVE-2017-11195 | Med | 0.40 | 6.1 | 0.01 | Jul 12, 2017 | Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that.… | ||
| CVE-2017-11194 | Med | 0.40 | 6.1 | 0.01 | Jul 12, 2017 | Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel, the certid parameter of adminservercacertdetails.cgi is reflected in the application's response and is not properly sanitized, allowing an attacker to inject tags. An attacker could… | ||
| CVE-2017-1321 | Med | 0.40 | 6.1 | 0.01 | Jul 12, 2017 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted… | ||
| CVE-2017-7678 | Med | 0.40 | 6.1 | 0.03 | Jul 12, 2017 | In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could… | ||
| CVE-2017-11180 | Med | 0.40 | 6.1 | 0.01 | Jul 12, 2017 | FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of an HTTP request or (2) the username entered on the login screen. | ||
| CVE-2017-11179 | Med | 0.40 | 6.1 | 0.01 | Jul 12, 2017 | FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account. | ||
| CVE-2017-8560 | Med | 0.40 | 6.1 | 0.03 | Jul 11, 2017 | Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site… | ||
| CVE-2017-8559 | Med | 0.40 | 6.1 | 0.03 | Jul 11, 2017 | Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site… |
- risk 0.40cvss 6.1epss 0.01
Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name.
- risk 0.40cvss 6.1epss 0.01
WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affected site
- risk 0.40cvss 6.1epss 0.01
Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack
- risk 0.40cvss 6.1epss 0.02
Wordpress Plugin Vospari Forms version < 1.4 is vulnerable to a reflected cross site scripting in the form submission resulting in javascript code execution in the context on the current user.
- risk 0.40cvss 6.1epss 0.01
Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parent_id parameter to tree.php and drp_action parameter to data_sources.php.
- risk 0.40cvss 6.1epss 0.01
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters
- risk 0.40cvss 6.1epss 0.01
MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user
- risk 0.40cvss 6.1epss 0.01
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information
- risk 0.40cvss 6.1epss 0.01
Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.
- risk 0.40cvss 6.1epss 0.01
PHPMiniAdmin version 1.9.160630 is vulnerable to stored XSS in the name of databases, tables and columns resulting in potential account takeover and scraping of data (stealing data).
- risk 0.40cvss 6.1epss 0.01
FineCMS through 2017-07-12 allows XSS in visitors.php because JavaScript in visited URLs is not restricted either during logging or during the reading of logs, a different vulnerability than CVE-2017-11180.
- risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in /application/lib/ajax/get_image.php in FineCMS through 2017-07-12 allows remote attackers to inject arbitrary web script or HTML via the folder, id, or name parameter.
- risk 0.40cvss 6.1epss 0.01
Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that.…
- risk 0.40cvss 6.1epss 0.01
Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel, the certid parameter of adminservercacertdetails.cgi is reflected in the application's response and is not properly sanitized, allowing an attacker to inject tags. An attacker could…
- risk 0.40cvss 6.1epss 0.01
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
- risk 0.40cvss 6.1epss 0.03
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could…
- risk 0.40cvss 6.1epss 0.01
FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of an HTTP request or (2) the username entered on the login screen.
- risk 0.40cvss 6.1epss 0.01
FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account.
- risk 0.40cvss 6.1epss 0.03
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site…
- risk 0.40cvss 6.1epss 0.03
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site…