CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (46,610)
page 2095 of 2,331| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-18674 | Med | 0.00 | 6.1 | 0.01 | Nov 7, 2019 | GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter. | ||
| CVE-2018-18678 | Med | 0.00 | 6.1 | 0.01 | Oct 30, 2019 | GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroup_form_update.php gr_1~10 parameter. | ||
| CVE-2019-18413 | Low | 0.00 | 3.7 | 0.02 | Oct 24, 2019 | In TypeStack class-validator 0.10.2, validate() input validation can be bypassed because certain internal attributes can be overwritten via a conflicting name. Even though there is an optional forbidUnknownValues parameter that can be used to reduce the risk of this bypass, this… | ||
| CVE-2019-17606 | Med | 0.00 | 6.1 | 0.01 | Oct 23, 2019 | The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post. | ||
| CVE-2019-17108 | Med | 0.00 | 6.1 | 0.01 | Oct 8, 2019 | Local file inclusion in brokerPerformance.php in Centreon Web before 2.8.28 allows attackers to disclose information or perform a stored XSS attack on a user. | ||
| CVE-2019-17205 | Med | 0.00 | 6.1 | 0.01 | Oct 5, 2019 | TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed. | ||
| CVE-2019-15810 | Med | 0.00 | 6.1 | 0.01 | Sep 30, 2019 | Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via manipulation of a URL parameter. | ||
| CVE-2019-16148 | Med | 0.00 | 6.1 | 0.01 | Sep 9, 2019 | Sakai through 12.6 allows XSS via a chat user name. | ||
| CVE-2019-15700 | Med | 0.00 | 6.1 | 0.01 | Aug 27, 2019 | public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed value of" text. | ||
| CVE-2018-18668 | Med | 0.00 | 6.1 | 0.01 | Aug 26, 2019 | GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter. | ||
| CVE-2019-15478 | Med | 0.00 | 6.1 | 0.01 | Aug 26, 2019 | Status Board 1.1.81 has reflected XSS via logic.ts. | ||
| CVE-2019-15488 | Med | 0.00 | 6.1 | 0.01 | Aug 23, 2019 | Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. | ||
| CVE-2019-15487 | Med | 0.00 | 6.1 | 0.01 | Aug 23, 2019 | DfE School Experience before v16333-GA has XSS via a teacher training URL. | ||
| CVE-2019-15485 | Med | 0.00 | 6.1 | 0.01 | Aug 23, 2019 | Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. | ||
| CVE-2019-15484 | Med | 0.00 | 6.1 | 0.01 | Aug 23, 2019 | Bolt before 3.6.10 has XSS via an image's alt or title field. | ||
| CVE-2019-15483 | Med | 0.00 | 6.1 | 0.01 | Aug 23, 2019 | Bolt before 3.6.10 has XSS via a title that is mishandled in the system log. | ||
| CVE-2019-15482 | Med | 0.00 | 6.1 | 0.01 | Aug 23, 2019 | selectize-plugin-a11y before 1.1.0 has XSS via the msg field. | ||
| CVE-2019-15481 | Med | 0.00 | 6.1 | 0.01 | Aug 23, 2019 | Kimai v2 before 1.1 has XSS via a timesheet description. | ||
| CVE-2019-15480 | Med | 0.00 | 5.4 | 0.01 | Aug 23, 2019 | Domoticz 4.10717 has XSS via item.Name. | ||
| CVE-2019-15476 | Med | 0.00 | 6.1 | 0.01 | Aug 23, 2019 | Former before 4.2.1 has XSS via a checkbox value. |
- risk 0.00cvss 6.1epss 0.01
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter.
- risk 0.00cvss 6.1epss 0.01
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroup_form_update.php gr_1~10 parameter.
- risk 0.00cvss 3.7epss 0.02
In TypeStack class-validator 0.10.2, validate() input validation can be bypassed because certain internal attributes can be overwritten via a conflicting name. Even though there is an optional forbidUnknownValues parameter that can be used to reduce the risk of this bypass, this…
- risk 0.00cvss 6.1epss 0.01
The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.
- risk 0.00cvss 6.1epss 0.01
Local file inclusion in brokerPerformance.php in Centreon Web before 2.8.28 allows attackers to disclose information or perform a stored XSS attack on a user.
- risk 0.00cvss 6.1epss 0.01
TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed.
- risk 0.00cvss 6.1epss 0.01
Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via manipulation of a URL parameter.
- risk 0.00cvss 6.1epss 0.01
Sakai through 12.6 allows XSS via a chat user name.
- risk 0.00cvss 6.1epss 0.01
public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed value of" text.
- risk 0.00cvss 6.1epss 0.01
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter.
- risk 0.00cvss 6.1epss 0.01
Status Board 1.1.81 has reflected XSS via logic.ts.
- risk 0.00cvss 6.1epss 0.01
Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.
- risk 0.00cvss 6.1epss 0.01
DfE School Experience before v16333-GA has XSS via a teacher training URL.
- risk 0.00cvss 6.1epss 0.01
Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php.
- risk 0.00cvss 6.1epss 0.01
Bolt before 3.6.10 has XSS via an image's alt or title field.
- risk 0.00cvss 6.1epss 0.01
Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.
- risk 0.00cvss 6.1epss 0.01
selectize-plugin-a11y before 1.1.0 has XSS via the msg field.
- risk 0.00cvss 6.1epss 0.01
Kimai v2 before 1.1 has XSS via a timesheet description.
- risk 0.00cvss 5.4epss 0.01
Domoticz 4.10717 has XSS via item.Name.
- risk 0.00cvss 6.1epss 0.01
Former before 4.2.1 has XSS via a checkbox value.