CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,564)
page 1428 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-24738 | Med | 0.35 | 5.4 | 0.01 | Dec 21, 2021 | The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks | ||
| CVE-2021-43842 | Med | 0.35 | 5.4 | 0.01 | Dec 20, 2021 | Wiki.js is a wiki app built on Node.js. Wiki.js versions 2.5.257 and earlier are vulnerable to stored cross-site scripting through a SVG file upload. By creating a crafted SVG file, a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attacker… | ||
| CVE-2021-43441 | Med | 0.35 | 5.3 | 0.01 | Dec 20, 2021 | An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form | ||
| CVE-2021-43438 | Med | 0.35 | 5.4 | 0.01 | Dec 20, 2021 | Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field | ||
| CVE-2021-44263 | Med | 0.35 | 5.4 | 0.01 | Dec 20, 2021 | Gurock TestRail before 7.2.4 mishandles HTML escaping. | ||
| CVE-2021-38883 | Med | 0.35 | 5.4 | 0.01 | Dec 17, 2021 | IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially… | ||
| CVE-2021-42584 | Med | 0.35 | 5.4 | 0.01 | Dec 17, 2021 | A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32. | ||
| CVE-2021-44317 | Med | 0.35 | 5.4 | 0.01 | Dec 16, 2021 | In Bus Pass Management System v1.0, parameters 'pagedes' and `About Us` are affected with a Stored Cross-site scripting vulnerability. | ||
| CVE-2021-35490 | Med | 0.35 | 5.4 | 0.01 | Dec 15, 2021 | Thruk before 2.44 allows XSS for a quick command. | ||
| CVE-2021-42220 | Med | 0.35 | 5.4 | 0.01 | Dec 15, 2021 | A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box. | ||
| CVE-2021-41557 | Med | 0.35 | 5.4 | 0.01 | Dec 15, 2021 | Sofico Miles RIA 2020.2 Build 127964T is affected by Stored Cross Site Scripting (XSS). An attacker with access to a user account of the RIA IT or the Fleet role can create a crafted work order in the damage reports section (or change existing work orders). The XSS payload is in… | ||
| CVE-2021-41871 | Med | 0.35 | 5.4 | 0.00 | Dec 15, 2021 | An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log. | ||
| CVE-2021-44043 | Med | 0.35 | 5.4 | 0.00 | Dec 14, 2021 | An issue was discovered in UiPath App Studio 21.4.4. There is a persistent XSS vulnerability in the file-upload functionality for uploading icons when attempting to create new Apps. An attacker with minimal privileges in the application can build their own App and upload a… | ||
| CVE-2021-42061 | Med | 0.35 | 5.4 | 0.00 | Dec 14, 2021 | SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This allows a low privileged attacker to retrieve some data from the victim but will… | ||
| CVE-2021-42051 | Med | 0.35 | 5.4 | 0.01 | Dec 14, 2021 | An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a malicious SVG document that contains an XSS payload. | ||
| CVE-2021-24871 | Med | 0.35 | 5.4 | 0.01 | Dec 13, 2021 | The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks | ||
| CVE-2021-24855 | Med | 0.35 | 5.4 | 0.01 | Dec 13, 2021 | The Display Post Metadata WordPress plugin before 1.5.0 adds a shortcode to print out custom fields, however their content is not sanitised or escaped which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks | ||
| CVE-2021-24817 | Med | 0.35 | 5.4 | 0.01 | Dec 13, 2021 | The Ultimate NoFollow WordPress plugin through 1.4.8 does not sanitise and escape the href attribute of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks | ||
| CVE-2020-19683 | Med | 0.35 | 5.4 | 0.01 | Dec 9, 2021 | A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. | ||
| CVE-2021-42752 | Med | 0.35 | 5.4 | 0.01 | Dec 8, 2021 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute malicious javascript code on victim's host via crafted HTTP requests |
- risk 0.35cvss 5.4epss 0.01
The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks
- risk 0.35cvss 5.4epss 0.01
Wiki.js is a wiki app built on Node.js. Wiki.js versions 2.5.257 and earlier are vulnerable to stored cross-site scripting through a SVG file upload. By creating a crafted SVG file, a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attacker…
- risk 0.35cvss 5.3epss 0.01
An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form
- risk 0.35cvss 5.4epss 0.01
Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field
- risk 0.35cvss 5.4epss 0.01
Gurock TestRail before 7.2.4 mishandles HTML escaping.
- risk 0.35cvss 5.4epss 0.01
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…
- risk 0.35cvss 5.4epss 0.01
A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.
- risk 0.35cvss 5.4epss 0.01
In Bus Pass Management System v1.0, parameters 'pagedes' and `About Us` are affected with a Stored Cross-site scripting vulnerability.
- risk 0.35cvss 5.4epss 0.01
Thruk before 2.44 allows XSS for a quick command.
- risk 0.35cvss 5.4epss 0.01
A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.
- risk 0.35cvss 5.4epss 0.01
Sofico Miles RIA 2020.2 Build 127964T is affected by Stored Cross Site Scripting (XSS). An attacker with access to a user account of the RIA IT or the Fleet role can create a crafted work order in the damage reports section (or change existing work orders). The XSS payload is in…
- risk 0.35cvss 5.4epss 0.00
An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log.
- risk 0.35cvss 5.4epss 0.00
An issue was discovered in UiPath App Studio 21.4.4. There is a persistent XSS vulnerability in the file-upload functionality for uploading icons when attempting to create new Apps. An attacker with minimal privileges in the application can build their own App and upload a…
- risk 0.35cvss 5.4epss 0.00
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This allows a low privileged attacker to retrieve some data from the victim but will…
- risk 0.35cvss 5.4epss 0.01
An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a malicious SVG document that contains an XSS payload.
- risk 0.35cvss 5.4epss 0.01
The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks
- risk 0.35cvss 5.4epss 0.01
The Display Post Metadata WordPress plugin before 1.5.0 adds a shortcode to print out custom fields, however their content is not sanitised or escaped which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
- risk 0.35cvss 5.4epss 0.01
The Ultimate NoFollow WordPress plugin through 1.4.8 does not sanitise and escape the href attribute of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks
- risk 0.35cvss 5.4epss 0.01
A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php.
- risk 0.35cvss 5.4epss 0.01
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute malicious javascript code on victim's host via crafted HTTP requests