CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,563)
page 1649 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-20975 | Med | 0.33 | 6.1 | 0.01 | Aug 20, 2019 | Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb. | ||
| CVE-2016-10871 | Med | 0.33 | 6.1 | 0.01 | Aug 13, 2019 | The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page. | ||
| CVE-2018-20965 | Med | 0.33 | 6.1 | 0.01 | Aug 12, 2019 | The ultimate-member plugin before 2.0.4 for WordPress has XSS. | ||
| CVE-2016-10872 | Med | 0.33 | 6.1 | 0.01 | Aug 12, 2019 | The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form. | ||
| CVE-2018-20962 | Med | 0.33 | 6.1 | 0.01 | Aug 8, 2019 | The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type. | ||
| CVE-2019-7939 | Med | 0.33 | 6.1 | 0.01 | Aug 2, 2019 | A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by sending a victim a crafted URL that results in malicious javascript… | ||
| CVE-2019-7877 | Med | 0.33 | 6.1 | 0.01 | Aug 2, 2019 | A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to manage orders can inject malicious javascript. | ||
| CVE-2019-1010199 | Med | 0.33 | 6.1 | 0.01 | Jul 23, 2019 | ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS). The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is… | ||
| CVE-2019-13970 | Med | 0.33 | 6.1 | 0.02 | Jul 19, 2019 | In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js. | ||
| CVE-2019-1010314 | Med | 0.33 | 6.1 | 0.01 | Jul 11, 2019 | Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page. | ||
| CVE-2019-13506 | Med | 0.33 | 6.1 | 0.01 | Jul 11, 2019 | @nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS. | ||
| CVE-2017-6216 | Med | 0.33 | 6.1 | 0.01 | Jul 3, 2019 | novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code execution | ||
| CVE-2018-11227 | Med | 0.33 | 6.1 | 0.05 | Jul 3, 2019 | Monstra CMS 3.0.4 and earlier has XSS via index.php. | ||
| CVE-2019-13127 | Med | 0.33 | 6.1 | 0.01 | Jul 1, 2019 | An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products. Improper input validation/sanitization of a color field leads to XSS. This is associated with javascript/examples/grapheditor/www/js/Dialogs… | ||
| CVE-2019-10085 | Med | 0.33 | 6.1 | 0.05 | Jun 19, 2019 | In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page. | ||
| CVE-2019-12823 | Med | 0.33 | 6.1 | 0.01 | Jun 18, 2019 | Craft CMS before 3.1.31 does not properly filter XML feeds and thus allowing XSS. | ||
| CVE-2019-10336 | Med | 0.33 | 6.1 | 0.01 | Jun 11, 2019 | A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able to control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in job configuration forms containing post-build steps provided by this… | ||
| CVE-2019-12741 | Med | 0.33 | 6.1 | 0.01 | Jun 5, 2019 | XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via… | ||
| CVE-2019-12308 | Med | 0.33 | 6.1 | 0.02 | Jun 3, 2019 | An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database,… | ||
| CVE-2018-14425 | Med | 0.33 | 6.1 | 0.01 | May 30, 2019 | There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1. |
- risk 0.33cvss 6.1epss 0.01
Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.
- risk 0.33cvss 6.1epss 0.01
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.
- risk 0.33cvss 6.1epss 0.01
The ultimate-member plugin before 2.0.4 for WordPress has XSS.
- risk 0.33cvss 6.1epss 0.01
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.
- risk 0.33cvss 6.1epss 0.01
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
- risk 0.33cvss 6.1epss 0.01
A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by sending a victim a crafted URL that results in malicious javascript…
- risk 0.33cvss 6.1epss 0.01
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to manage orders can inject malicious javascript.
- risk 0.33cvss 6.1epss 0.01
ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS). The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is…
- risk 0.33cvss 6.1epss 0.02
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.
- risk 0.33cvss 6.1epss 0.01
Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page.
- risk 0.33cvss 6.1epss 0.01
@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS.
- risk 0.33cvss 6.1epss 0.01
novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code execution
- risk 0.33cvss 6.1epss 0.05
Monstra CMS 3.0.4 and earlier has XSS via index.php.
- risk 0.33cvss 6.1epss 0.01
An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products. Improper input validation/sanitization of a color field leads to XSS. This is associated with javascript/examples/grapheditor/www/js/Dialogs…
- risk 0.33cvss 6.1epss 0.05
In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page.
- risk 0.33cvss 6.1epss 0.01
Craft CMS before 3.1.31 does not properly filter XML feeds and thus allowing XSS.
- risk 0.33cvss 6.1epss 0.01
A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able to control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in job configuration forms containing post-build steps provided by this…
- risk 0.33cvss 6.1epss 0.01
XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via…
- risk 0.33cvss 6.1epss 0.02
An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database,…
- risk 0.33cvss 6.1epss 0.01
There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1.