CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,563)
page 973 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-16953 | Med | 0.40 | 6.1 | 0.01 | Sep 18, 2018 | The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). User input from the name parameter is unsafely reflected in the server response. NOTE: this CVE is… | ||
| CVE-2018-17113 | Med | 0.40 | 6.1 | 0.01 | Sep 17, 2018 | App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173. | ||
| CVE-2018-17086 | Med | 0.40 | 6.1 | 0.01 | Sep 16, 2018 | An issue was discovered in OTCMS 3.61. XSS exists in admin/share_switch.php via these parameters: fieldName fieldName2 tabName. | ||
| CVE-2018-17085 | Med | 0.40 | 6.1 | 0.01 | Sep 16, 2018 | An issue was discovered in OTCMS 3.61. XSS exists in admin/users.php via these parameters: dataTypeCN dataMode dataModeStr. | ||
| CVE-2018-17062 | Med | 0.40 | 6.1 | 0.01 | Sep 16, 2018 | An issue was discovered in SeaCMS 6.64. XSS exists in admin_video.php via the action, area, type, yuyan, jqtype, v_isunion, v_recycled, v_ismoney, or v_ispsd parameter. | ||
| CVE-2018-17082 | Med | 0.40 | 6.1 | 0.04 | Sep 16, 2018 | The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in… | ||
| CVE-2018-17077 | Med | 0.40 | 6.1 | 0.01 | Sep 16, 2018 | An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed. | ||
| CVE-2018-17061 | Med | 0.40 | 6.1 | 0.01 | Sep 15, 2018 | BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results. | ||
| CVE-2018-17051 | Med | 0.40 | 6.1 | 0.01 | Sep 14, 2018 | K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php. | ||
| CVE-2018-17049 | Med | 0.40 | 6.1 | 0.01 | Sep 14, 2018 | CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action. | ||
| CVE-2018-17046 | Med | 0.40 | 6.1 | 0.01 | Sep 14, 2018 | translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js. | ||
| CVE-2018-17039 | — | Med | 0.40 | 6.1 | 0.01 | Sep 14, 2018 | MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled. | |
| CVE-2018-17034 | Med | 0.40 | 6.1 | 0.01 | Sep 14, 2018 | UCMS 1.4.6 has XSS via the install/index.php mysql_dbname parameter. | ||
| CVE-2018-17025 | Med | 0.40 | 6.1 | 0.01 | Sep 13, 2018 | admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an edit_page action for a page with no special role. | ||
| CVE-2018-17021 | Med | 0.40 | 6.1 | 0.01 | Sep 13, 2018 | Cross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter. | ||
| CVE-2018-8470 | Med | 0.40 | 6.1 | 0.03 | Sep 13, 2018 | A security feature bypass vulnerability exists in Internet Explorer due to how scripts are handled that allows a universal cross-site scripting (UXSS) condition, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11. | ||
| CVE-2018-16980 | Med | 0.40 | 6.1 | 0.01 | Sep 12, 2018 | dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters. | ||
| CVE-2018-16978 | Med | 0.40 | 6.1 | 0.01 | Sep 12, 2018 | Monstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password parameter to users/registration, a different vulnerability than CVE-2018-11473. | ||
| CVE-2018-2464 | Med | 0.40 | 6.1 | 0.01 | Sep 11, 2018 | SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting (XSS) vulnerability. | ||
| CVE-2018-2452 | Med | 0.40 | 6.1 | 0.01 | Sep 11, 2018 | The logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user-controlled inputs, resulting in a cross-site scripting (XSS) vulnerability. |
- risk 0.40cvss 6.1epss 0.01
The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). User input from the name parameter is unsafely reflected in the server response. NOTE: this CVE is…
- risk 0.40cvss 6.1epss 0.01
App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in OTCMS 3.61. XSS exists in admin/share_switch.php via these parameters: fieldName fieldName2 tabName.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in OTCMS 3.61. XSS exists in admin/users.php via these parameters: dataTypeCN dataMode dataModeStr.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in SeaCMS 6.64. XSS exists in admin_video.php via the action, area, type, yuyan, jqtype, v_isunion, v_recycled, v_ismoney, or v_ispsd parameter.
- risk 0.40cvss 6.1epss 0.04
The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in…
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed.
- risk 0.40cvss 6.1epss 0.01
BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results.
- risk 0.40cvss 6.1epss 0.01
K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php.
- risk 0.40cvss 6.1epss 0.01
CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action.
- risk 0.40cvss 6.1epss 0.01
translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js.
- risk 0.40cvss 6.1epss 0.01
MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled.
- risk 0.40cvss 6.1epss 0.01
UCMS 1.4.6 has XSS via the install/index.php mysql_dbname parameter.
- risk 0.40cvss 6.1epss 0.01
admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an edit_page action for a page with no special role.
- risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter.
- risk 0.40cvss 6.1epss 0.03
A security feature bypass vulnerability exists in Internet Explorer due to how scripts are handled that allows a universal cross-site scripting (UXSS) condition, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11.
- risk 0.40cvss 6.1epss 0.01
dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.
- risk 0.40cvss 6.1epss 0.01
Monstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password parameter to users/registration, a different vulnerability than CVE-2018-11473.
- risk 0.40cvss 6.1epss 0.01
SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting (XSS) vulnerability.
- risk 0.40cvss 6.1epss 0.01
The logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user-controlled inputs, resulting in a cross-site scripting (XSS) vulnerability.