CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,563)
page 917 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-0361 | Med | 0.40 | 6.1 | 0.01 | Sep 10, 2019 | SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. | ||
| CVE-2017-18608 | Med | 0.40 | 6.1 | 0.01 | Sep 10, 2019 | The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues. | ||
| CVE-2017-18606 | Med | 0.40 | 6.1 | 0.01 | Sep 10, 2019 | The avada theme before 5.1.5 for WordPress has stored XSS. | ||
| CVE-2017-18603 | Med | 0.40 | 6.1 | 0.01 | Sep 10, 2019 | The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter. | ||
| CVE-2017-18599 | Med | 0.40 | 6.1 | 0.01 | Sep 10, 2019 | The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter. | ||
| CVE-2017-18598 | Med | 0.40 | 6.1 | 0.02 | Sep 10, 2019 | The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php. | ||
| CVE-2019-11547 | Med | 0.40 | 6.1 | 0.01 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has Improper Encoding or Escaping of Output. The branch name on new merge request notification emails isn't escaped, which could potentially… | ||
| CVE-2019-10670 | Med | 0.40 | 6.1 | 0.01 | Sep 9, 2019 | An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqli_escape_real_string for filtering data. However, this is particularly ineffective when returning user supplied input in an HTML or a JavaScript context, resulting in unsafe data… | ||
| CVE-2019-16148 | Med | 0.40 | 6.1 | 0.01 | Sep 9, 2019 | Sakai through 12.6 allows XSS via a chat user name. | ||
| CVE-2018-21012 | Med | 0.40 | 6.1 | 0.01 | Sep 9, 2019 | The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS. | ||
| CVE-2019-16130 | — | Med | 0.40 | 6.1 | 0.01 | Sep 9, 2019 | YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html. | |
| CVE-2019-16126 | Med | 0.40 | 6.1 | 0.02 | Sep 9, 2019 | Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images. | ||
| CVE-2019-16104 | Med | 0.40 | 6.1 | 0.01 | Sep 8, 2019 | Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO. | ||
| CVE-2018-11198 | Med | 0.40 | 6.1 | 0.01 | Sep 6, 2019 | An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json. | ||
| CVE-2019-15848 | Med | 0.40 | 6.1 | 0.01 | Sep 5, 2019 | JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user. | ||
| CVE-2019-4186 | Med | 0.40 | 6.1 | 0.02 | Sep 5, 2019 | IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers,… | ||
| CVE-2019-12644 | Med | 0.40 | 6.1 | 0.01 | Sep 5, 2019 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The… | ||
| CVE-2019-13975 | Med | 0.40 | 6.1 | 0.01 | Sep 4, 2019 | eGain Chat 15.0.3 allows HTML Injection. | ||
| CVE-2019-15898 | Med | 0.40 | 6.1 | 0.02 | Sep 3, 2019 | Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page. | ||
| CVE-2019-6181 | Med | 0.40 | 6.1 | 0.01 | Sep 3, 2019 | A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on… |
- risk 0.40cvss 6.1epss 0.01
SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
- risk 0.40cvss 6.1epss 0.01
The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The avada theme before 5.1.5 for WordPress has stored XSS.
- risk 0.40cvss 6.1epss 0.01
The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter.
- risk 0.40cvss 6.1epss 0.01
The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter.
- risk 0.40cvss 6.1epss 0.02
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has Improper Encoding or Escaping of Output. The branch name on new merge request notification emails isn't escaped, which could potentially…
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqli_escape_real_string for filtering data. However, this is particularly ineffective when returning user supplied input in an HTML or a JavaScript context, resulting in unsafe data…
- risk 0.40cvss 6.1epss 0.01
Sakai through 12.6 allows XSS via a chat user name.
- risk 0.40cvss 6.1epss 0.01
The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.
- risk 0.40cvss 6.1epss 0.02
Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.
- risk 0.40cvss 6.1epss 0.01
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.
- risk 0.40cvss 6.1epss 0.01
JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user.
- risk 0.40cvss 6.1epss 0.02
IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers,…
- risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
- risk 0.40cvss 6.1epss 0.01
eGain Chat 15.0.3 allows HTML Injection.
- risk 0.40cvss 6.1epss 0.02
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.
- risk 0.40cvss 6.1epss 0.01
A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on…