CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,563)
page 1639 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-27902 | Med | 0.33 | 6.1 | 0.01 | Jun 30, 2021 | An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads. | ||
| CVE-2010-4264 | Med | 0.33 | 6.1 | 0.01 | Jun 22, 2021 | It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side. | ||
| CVE-2021-28833 | Med | 0.33 | 6.1 | 0.01 | Jun 21, 2021 | Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796. | ||
| CVE-2021-33557 | Med | 0.33 | 6.1 | 0.02 | Jun 17, 2021 | An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field. | ||
| CVE-2021-21666 | Med | 0.33 | 6.1 | 0.01 | Jun 10, 2021 | Jenkins Kiuwan Plugin 1.6.0 and earlier does not escape query parameters in an error message for a form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability. | ||
| CVE-2021-33496 | Med | 0.33 | 6.1 | 0.01 | May 24, 2021 | Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view. | ||
| CVE-2021-32470 | Med | 0.33 | 6.1 | 0.01 | May 7, 2021 | Craft CMS before 3.6.13 has an XSS vulnerability. | ||
| CVE-2021-32052 | Med | 0.33 | 6.1 | 0.03 | May 6, 2021 | In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur.… | ||
| CVE-2020-36324 | Med | 0.33 | 6.1 | 0.01 | Apr 21, 2021 | Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type. | ||
| CVE-2021-29434 | Med | 0.33 | 6.1 | 0.01 | Apr 19, 2021 | Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensure that link URLs use a valid protocol. A malicious user with access to the… | ||
| CVE-2021-25926 | Med | 0.33 | 6.1 | 0.01 | Apr 12, 2021 | In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out… | ||
| CVE-2021-22510 | Med | 0.33 | 6.1 | 0.05 | Apr 8, 2021 | Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions. | ||
| CVE-2020-36307 | Med | 0.33 | 6.1 | 0.01 | Apr 6, 2021 | Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links. | ||
| CVE-2020-36306 | Med | 0.33 | 6.1 | 0.01 | Apr 6, 2021 | Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field. | ||
| CVE-2021-30151 | Med | 0.33 | 6.1 | 0.04 | Apr 6, 2021 | Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used. | ||
| CVE-2021-30074 | Med | 0.33 | 6.1 | 0.01 | Apr 2, 2021 | docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character. | ||
| CVE-2021-29272 | Med | 0.33 | 6.1 | 0.01 | Mar 27, 2021 | bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the "script" string. | ||
| CVE-2021-21333 | Med | 0.33 | 6.1 | 0.01 | Mar 26, 2021 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the notification emails sent for notifications for missed messages or for an expiring… | ||
| CVE-2021-28957 | Med | 0.33 | 6.1 | 0.04 | Mar 21, 2021 | An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit… | ||
| CVE-2020-6578 | Med | 0.33 | 6.1 | 0.01 | Mar 19, 2021 | Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl_main_page.php. |
- risk 0.33cvss 6.1epss 0.01
An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads.
- risk 0.33cvss 6.1epss 0.01
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.
- risk 0.33cvss 6.1epss 0.01
Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796.
- risk 0.33cvss 6.1epss 0.02
An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.
- risk 0.33cvss 6.1epss 0.01
Jenkins Kiuwan Plugin 1.6.0 and earlier does not escape query parameters in an error message for a form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.
- risk 0.33cvss 6.1epss 0.01
Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.
- risk 0.33cvss 6.1epss 0.01
Craft CMS before 3.6.13 has an XSS vulnerability.
- risk 0.33cvss 6.1epss 0.03
In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur.…
- risk 0.33cvss 6.1epss 0.01
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type.
- risk 0.33cvss 6.1epss 0.01
Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensure that link URLs use a valid protocol. A malicious user with access to the…
- risk 0.33cvss 6.1epss 0.01
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out…
- risk 0.33cvss 6.1epss 0.05
Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions.
- risk 0.33cvss 6.1epss 0.01
Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.
- risk 0.33cvss 6.1epss 0.01
Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field.
- risk 0.33cvss 6.1epss 0.04
Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
- risk 0.33cvss 6.1epss 0.01
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.
- risk 0.33cvss 6.1epss 0.01
bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the "script" string.
- risk 0.33cvss 6.1epss 0.01
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the notification emails sent for notifications for missed messages or for an expiring…
- risk 0.33cvss 6.1epss 0.04
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit…
- risk 0.33cvss 6.1epss 0.01
Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl_main_page.php.