CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,563)
page 1544 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-5331 | Med | 0.35 | 5.4 | 0.01 | Jan 10, 2018 | Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php. | ||
| CVE-2017-1000465 | Med | 0.35 | 5.4 | 0.01 | Jan 9, 2018 | Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, which can result in disruption of service and execution of javascript code. | ||
| CVE-2018-5312 | Med | 0.35 | 5.4 | 0.01 | Jan 9, 2018 | The tabs-responsive plugin 1.8.0 for WordPress has XSS via the post_title parameter to wp-admin/post.php. | ||
| CVE-2018-5311 | Med | 0.35 | 5.4 | 0.01 | Jan 9, 2018 | The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjoo_ecae_options[custom_css] parameter to the wp-admin/admin.php?page=tonjoo_excerpt URI. | ||
| CVE-2018-5281 | Med | 0.35 | 5.4 | 0.03 | Jan 8, 2018 | SonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens. | ||
| CVE-2018-5280 | Med | 0.35 | 5.4 | 0.03 | Jan 8, 2018 | SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure SSO screens. | ||
| CVE-2018-5071 | Med | 0.35 | 5.4 | 0.01 | Jan 8, 2018 | Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is… | ||
| CVE-2018-5216 | Med | 0.35 | 5.4 | 0.01 | Jan 4, 2018 | Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource. | ||
| CVE-2018-5215 | Med | 0.35 | 5.4 | 0.01 | Jan 4, 2018 | Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter. | ||
| CVE-2018-5214 | Med | 0.35 | 5.4 | 0.01 | Jan 4, 2018 | The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php. | ||
| CVE-2018-5213 | Med | 0.35 | 5.4 | 0.01 | Jan 4, 2018 | The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action to wp-admin/post.php. | ||
| CVE-2018-5212 | Med | 0.35 | 5.4 | 0.01 | Jan 4, 2018 | The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an edit action to wp-admin/post.php. | ||
| CVE-2017-1000462 | Med | 0.35 | 5.4 | 0.01 | Jan 3, 2018 | BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code. | ||
| CVE-2017-1000478 | Med | 0.35 | 5.4 | 0.01 | Jan 3, 2018 | ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service. | ||
| CVE-2017-1000467 | Med | 0.35 | 5.4 | 0.01 | Jan 3, 2018 | LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code. | ||
| CVE-2017-1000466 | Med | 0.35 | 5.4 | 0.01 | Jan 3, 2018 | Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code. | ||
| CVE-2017-1000463 | Med | 0.35 | 5.4 | 0.01 | Jan 3, 2018 | Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code. | ||
| CVE-2017-18004 | Med | 0.35 | 5.4 | 0.01 | Dec 31, 2017 | Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint. | ||
| CVE-2017-17995 | Med | 0.35 | 5.4 | 0.01 | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request. | ||
| CVE-2017-17994 | Med | 0.35 | 5.4 | 0.01 | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request. |
- risk 0.35cvss 5.4epss 0.01
Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php.
- risk 0.35cvss 5.4epss 0.01
Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, which can result in disruption of service and execution of javascript code.
- risk 0.35cvss 5.4epss 0.01
The tabs-responsive plugin 1.8.0 for WordPress has XSS via the post_title parameter to wp-admin/post.php.
- risk 0.35cvss 5.4epss 0.01
The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjoo_ecae_options[custom_css] parameter to the wp-admin/admin.php?page=tonjoo_excerpt URI.
- risk 0.35cvss 5.4epss 0.03
SonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens.
- risk 0.35cvss 5.4epss 0.03
SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure SSO screens.
- risk 0.35cvss 5.4epss 0.01
Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is…
- risk 0.35cvss 5.4epss 0.01
Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource.
- risk 0.35cvss 5.4epss 0.01
Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter.
- risk 0.35cvss 5.4epss 0.01
The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php.
- risk 0.35cvss 5.4epss 0.01
The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action to wp-admin/post.php.
- risk 0.35cvss 5.4epss 0.01
The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an edit action to wp-admin/post.php.
- risk 0.35cvss 5.4epss 0.01
BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code.
- risk 0.35cvss 5.4epss 0.01
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.
- risk 0.35cvss 5.4epss 0.01
LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code.
- risk 0.35cvss 5.4epss 0.01
Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code.
- risk 0.35cvss 5.4epss 0.01
Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code.
- risk 0.35cvss 5.4epss 0.01
Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.
- risk 0.35cvss 5.4epss 0.01
Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.
- risk 0.35cvss 5.4epss 0.01
Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request.