CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,563)
page 885 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-20523 | Med | 0.40 | 6.1 | 0.01 | Mar 19, 2020 | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter. | ||
| CVE-2019-20522 | Med | 0.40 | 6.1 | 0.01 | Mar 19, 2020 | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter. | ||
| CVE-2019-19336 | Med | 0.40 | 6.1 | 0.01 | Mar 19, 2020 | A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in… | ||
| CVE-2019-20528 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter. | ||
| CVE-2019-20512 | Med | 0.40 | 6.1 | 0.00 | Mar 18, 2020 | Open edX Ironwood.1 allows support/certificates?course_id= reflected XSS. | ||
| CVE-2019-20511 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | ERPNext 11.1.47 allows blog?blog_category= Frame Injection. | ||
| CVE-2019-12370 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission. | ||
| CVE-2019-12369 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | The TypeApp application through 1.9.5.35 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission. | ||
| CVE-2019-12368 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | The Edison Mail application through 1.7.1 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission. | ||
| CVE-2019-12367 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | The BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission. | ||
| CVE-2019-12366 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | The Nine application through 4.5.3a for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission. | ||
| CVE-2019-12365 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | The Newton application through 10.0.23 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission. | ||
| CVE-2020-9443 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82. | ||
| CVE-2019-14884 | Med | 0.40 | 6.1 | 0.01 | Mar 18, 2020 | A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error messages. | ||
| CVE-2020-10114 | Med | 0.40 | 6.1 | 0.01 | Mar 17, 2020 | cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). | ||
| CVE-2020-10113 | Med | 0.40 | 6.1 | 0.01 | Mar 17, 2020 | cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). | ||
| CVE-2019-20493 | Med | 0.40 | 6.1 | 0.01 | Mar 17, 2020 | cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520). | ||
| CVE-2020-10242 | Med | 0.40 | 6.1 | 0.01 | Mar 16, 2020 | An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allows XSS attacks. | ||
| CVE-2019-19211 | Med | 0.40 | 6.1 | 0.02 | Mar 16, 2020 | Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS. | ||
| CVE-2019-14512 | Med | 0.40 | 6.1 | 0.01 | Mar 16, 2020 | LimeSurvey 3.17.7+190627 has XSS via Boxes in application/extensions/PanelBoxWidget/views/box.php or a label title in application/views/admin/labels/labelview_view.php. |
- risk 0.40cvss 6.1epss 0.01
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.
- risk 0.40cvss 6.1epss 0.01
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.
- risk 0.40cvss 6.1epss 0.01
A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in…
- risk 0.40cvss 6.1epss 0.01
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter.
- risk 0.40cvss 6.1epss 0.00
Open edX Ironwood.1 allows support/certificates?course_id= reflected XSS.
- risk 0.40cvss 6.1epss 0.01
ERPNext 11.1.47 allows blog?blog_category= Frame Injection.
- risk 0.40cvss 6.1epss 0.01
The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
- risk 0.40cvss 6.1epss 0.01
The TypeApp application through 1.9.5.35 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
- risk 0.40cvss 6.1epss 0.01
The Edison Mail application through 1.7.1 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
- risk 0.40cvss 6.1epss 0.01
The BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
- risk 0.40cvss 6.1epss 0.01
The Nine application through 4.5.3a for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
- risk 0.40cvss 6.1epss 0.01
The Newton application through 10.0.23 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
- risk 0.40cvss 6.1epss 0.01
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82.
- risk 0.40cvss 6.1epss 0.01
A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error messages.
- risk 0.40cvss 6.1epss 0.01
cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535).
- risk 0.40cvss 6.1epss 0.01
cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515).
- risk 0.40cvss 6.1epss 0.01
cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520).
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allows XSS attacks.
- risk 0.40cvss 6.1epss 0.02
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS.
- risk 0.40cvss 6.1epss 0.01
LimeSurvey 3.17.7+190627 has XSS via Boxes in application/extensions/PanelBoxWidget/views/box.php or a label title in application/views/admin/labels/labelview_view.php.