CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,563)
page 950 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-7416 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable. | ||
| CVE-2019-7299 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in… | ||
| CVE-2018-20639 | Med | 0.40 | 6.1 | 0.01 | Mar 21, 2019 | PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar. | ||
| CVE-2018-20212 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter. | ||
| CVE-2018-20141 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | AbanteCart 1.2.12 has reflected cross-site scripting (XSS) via the sort parameter, as demonstrated by a /apparel--accessories?sort= substring. | ||
| CVE-2018-20140 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL parameters. | ||
| CVE-2018-20121 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | Podcast Generator 2.7 has stored cross-site scripting (XSS) via the URL addcategory parameter. | ||
| CVE-2018-19917 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | Microweber 1.0.8 has reflected cross-site scripting (XSS) vulnerabilities. | ||
| CVE-2018-19694 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form. | ||
| CVE-2018-19525 | Med | 0.40 | 6.1 | 0.01 | Mar 21, 2019 | An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation. | ||
| CVE-2018-19509 | Med | 0.40 | 6.1 | 0.01 | Mar 21, 2019 | wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to… | ||
| CVE-2018-19498 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | The Simplenia Pages plugin 2.6.0 for Atlassian Bitbucket Server has XSS. | ||
| CVE-2018-18845 | Med | 0.40 | 6.1 | 0.01 | Mar 21, 2019 | internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path. A remote unauthenticated attacker could potentially exploit this vulnerability… | ||
| CVE-2018-16519 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets. | ||
| CVE-2018-14486 | Med | 0.40 | 6.1 | 0.01 | Mar 21, 2019 | DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML. | ||
| CVE-2018-12638 | Med | 0.40 | 6.1 | 0.01 | Mar 21, 2019 | An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app. | ||
| CVE-2016-5819 | Med | 0.40 | 6.1 | 0.01 | Mar 21, 2019 | Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust… | ||
| CVE-2018-20806 | Med | 0.40 | 6.1 | 0.01 | Mar 17, 2019 | Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter). | ||
| CVE-2018-19391 | Med | 0.40 | 6.1 | 0.01 | Mar 15, 2019 | Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field. | ||
| CVE-2019-9765 | Med | 0.40 | 6.1 | 0.01 | Mar 14, 2019 | In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html. |
- risk 0.40cvss 6.1epss 0.02
XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable.
- risk 0.40cvss 6.1epss 0.02
A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in…
- risk 0.40cvss 6.1epss 0.01
PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.
- risk 0.40cvss 6.1epss 0.02
bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter.
- risk 0.40cvss 6.1epss 0.02
AbanteCart 1.2.12 has reflected cross-site scripting (XSS) via the sort parameter, as demonstrated by a /apparel--accessories?sort= substring.
- risk 0.40cvss 6.1epss 0.02
Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL parameters.
- risk 0.40cvss 6.1epss 0.02
Podcast Generator 2.7 has stored cross-site scripting (XSS) via the URL addcategory parameter.
- risk 0.40cvss 6.1epss 0.02
Microweber 1.0.8 has reflected cross-site scripting (XSS) vulnerabilities.
- risk 0.40cvss 6.1epss 0.02
HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation.
- risk 0.40cvss 6.1epss 0.01
wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to…
- risk 0.40cvss 6.1epss 0.02
The Simplenia Pages plugin 2.6.0 for Atlassian Bitbucket Server has XSS.
- risk 0.40cvss 6.1epss 0.01
internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path. A remote unauthenticated attacker could potentially exploit this vulnerability…
- risk 0.40cvss 6.1epss 0.02
COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets.
- risk 0.40cvss 6.1epss 0.01
DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app.
- risk 0.40cvss 6.1epss 0.01
Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust…
- risk 0.40cvss 6.1epss 0.01
Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).
- risk 0.40cvss 6.1epss 0.01
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.
- risk 0.40cvss 6.1epss 0.01
In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.