Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: xss Clear
ID Title
CVE-2022-35554 Cross-Site Scripting (XSS) in bpcbt (CVE-2022-35554)
cross-site scripting in bpcbt (CVE-2022-35554). Risk of unauthorized operations or information disclosure.
CVE-2022-36530 Cross-Site Scripting (XSS) in rageframe (CVE-2022-36530)
cross-site scripting in rageframe (CVE-2022-36530). Risk of unauthorized operations or information disclosure.
CVE-2022-24654 Cross-Site Scripting (XSS) in intelbras (CVE-2022-24654)
cross-site scripting in intelbras (CVE-2022-24654). Risk of unauthorized operations or information disclosure.
CVE-2022-35509 Cross-Site Scripting (XSS) in eyoucms (CVE-2022-35509)
cross-site scripting in eyoucms (CVE-2022-35509). Risk of unauthorized operations or information disclosure.
CVE-2022-20713 Vulnerability in cisco (CVE-2022-20713)
vulnerability in cisco (CVE-2022-20713). Risk of unauthorized operations or information disclosure.
CVE-2022-35493 Cross-Site Scripting (XSS) in wrteam (CVE-2022-35493)
cross-site scripting in wrteam (CVE-2022-35493). Risk of unauthorized operations or information disclosure.
CVE-2022-35118 PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.
PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.
CVE-2022-34611 Cross-Site Scripting (XSS) in online-fire-reporting-system-project (CVE-2022-34611)
cross-site scripting in online-fire-reporting-system-project (CVE-2022-34611). Risk of unauthorized operations or information disclosure.
CVE-2020-35305 Cross-Site Scripting (XSS) in gollum-project (CVE-2020-35305)
cross-site scripting in gollum-project (CVE-2020-35305). Risk of unauthorized operations or information disclosure.
CVE-2022-32074 Cross-Site Scripting (XSS) in enhancesoft (CVE-2022-32074)
cross-site scripting in enhancesoft (CVE-2022-32074). Risk of unauthorized operations or information disclosure.
CVE-2022-32114 Unrestricted File Upload in strapi (CVE-2022-32114)
vulnerability in strapi (CVE-2022-32114). Successful exploitation can lead to full system takeover.
CVE-2022-31904 Cross-Site Scripting (XSS) in uberrider (CVE-2022-31904)
cross-site scripting in uberrider (CVE-2022-31904). Risk of unauthorized operations or information disclosure.
CVE-2022-33098 Cross-Site Scripting (XSS) in magnolia-cms (CVE-2022-33098)
cross-site scripting in magnolia-cms (CVE-2022-33098). Risk of unauthorized operations or information disclosure.
CVE-2022-33075 Cross-Site Scripting (XSS) in phpgurukul (CVE-2022-33075)
cross-site scripting in phpgurukul (CVE-2022-33075). Risk of unauthorized operations or information disclosure.
CVE-2022-31897 Cross-Site Scripting (XSS) in phpgurukul (CVE-2022-31897)
cross-site scripting in phpgurukul (CVE-2022-31897). Risk of unauthorized operations or information disclosure.
CVE-2022-33009 Cross-Site Scripting (XSS) in lightcms-project (CVE-2022-33009)
cross-site scripting in lightcms-project (CVE-2022-33009). Risk of unauthorized operations or information disclosure.
CVE-2020-21161 Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.
Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.
CVE-2020-27509 Cross-Site Scripting (XSS) in galaxkey (CVE-2020-27509)
cross-site scripting in galaxkey (CVE-2020-27509). Risk of unauthorized operations or information disclosure.
CVE-2022-25585 Cross-Site Scripting (XSS) in unioncms-project (CVE-2022-25585)
cross-site scripting in unioncms-project (CVE-2022-25585). Risk of unauthorized operations or information disclosure.
CVE-2021-45026 Cross-Site Scripting (XSS) in rocketsoftware (CVE-2021-45026)
cross-site scripting in rocketsoftware (CVE-2021-45026). Risk of unauthorized operations or information disclosure.
CVE-2021-41663 Cross-Site Scripting (XSS) in 1234n (CVE-2021-41663)
cross-site scripting in 1234n (CVE-2021-41663). Risk of unauthorized operations or information disclosure.
CVE-2022-24238 Cross-Site Scripting (XSS) in aceware (CVE-2022-24238)
cross-site scripting in aceware (CVE-2022-24238). Risk of unauthorized operations or information disclosure.
CVE-2021-36698 Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name.
Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name.
CVE-2020-27406 Cross-Site Scripting (XSS) in dynpg (CVE-2020-27406)
cross-site scripting in dynpg (CVE-2020-27406). Risk of unauthorized operations or information disclosure.
CVE-2021-35503 Cross-Site Scripting (XSS) in afian (CVE-2021-35503)
cross-site scripting in afian (CVE-2021-35503). Risk of unauthorized operations or information disclosure.
CVE-2021-35506 Cross-Site Scripting (XSS) in afian (CVE-2021-35506)
cross-site scripting in afian (CVE-2021-35506). Risk of unauthorized operations or information disclosure.
CVE-2020-21228 Cross-Site Scripting (XSS) in jizhicms (CVE-2020-21228)
cross-site scripting in jizhicms (CVE-2020-21228). Risk of unauthorized operations or information disclosure.
CVE-2020-20345 Cross-Site Scripting (XSS) in wtcms-project (CVE-2020-20345)
cross-site scripting in wtcms-project (CVE-2020-20345). Risk of unauthorized operations or information disclosure.
CVE-2021-31655 Cross-Site Scripting (XSS) in trendnet (CVE-2021-31655)
cross-site scripting in trendnet (CVE-2021-31655). Risk of unauthorized operations or information disclosure.
CVE-2021-37743 Cross-Site Scripting (XSS) in misp-project (CVE-2021-37743)
cross-site scripting in misp-project (CVE-2021-37743). Risk of unauthorized operations or information disclosure.
CVE-2021-37742 Cross-Site Scripting (XSS) in misp-project (CVE-2021-37742)
cross-site scripting in misp-project (CVE-2021-37742). Risk of unauthorized operations or information disclosure.
CVE-2021-37534 app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster.
app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster.
CVE-2021-27332 Cross-Site Scripting (XSS) in casap-automated-enrollment-system-project (CVE-2021-27332)
cross-site scripting in casap-automated-enrollment-system-project (CVE-2021-27332). Risk of unauthorized operations or information disclosure.
CVE-2021-30119 Cross Site Scripting (XSS) exists in Kaseya VSA before 9.5.7.
Cross Site Scripting (XSS) exists in Kaseya VSA before 9.5.7.
CVE-2020-20584 Cross-Site Scripting (XSS) in baigo (CVE-2020-20584)
cross-site scripting in baigo (CVE-2020-20584). Risk of unauthorized operations or information disclosure.
CVE-2020-20363 Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.
Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.
CVE-2021-36212 Cross-Site Scripting (XSS) in misp-project (CVE-2021-36212)
cross-site scripting in misp-project (CVE-2021-36212). Risk of unauthorized operations or information disclosure.
CVE-2021-31721 Cross-Site Scripting (XSS) in chevereto (CVE-2021-31721)
cross-site scripting in chevereto (CVE-2021-31721). Risk of unauthorized operations or information disclosure.
CVE-2020-21517 Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
CVE-2020-26680 Cross-Site Scripting (XSS) in vfairs (CVE-2020-26680)
cross-site scripting in vfairs (CVE-2020-26680). Risk of unauthorized operations or information disclosure.
CVE-2017-17678 Cross-Site Scripting (XSS) in bmc (CVE-2017-17678)
cross-site scripting in bmc (CVE-2017-17678). Risk of unauthorized operations or information disclosure.
CVE-2021-27695 Cross-Site Scripting (XSS) in openmaint (CVE-2021-27695)
cross-site scripting in openmaint (CVE-2021-27695). Risk of unauthorized operations or information disclosure.
CVE-2021-3294 Cross-Site Scripting (XSS) in casap-automated-enrollment-system-project (CVE-2021-3294)
cross-site scripting in casap-automated-enrollment-system-project (CVE-2021-3294). Risk of unauthorized operations or information disclosure.
CVE-2020-35854 Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.
Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.
CVE-2020-24085 Cross-Site Scripting (XSS) in misp-project (CVE-2020-24085)
cross-site scripting in misp-project (CVE-2020-24085). Risk of unauthorized operations or information disclosure.
CVE-2021-3184 Cross-Site Scripting (XSS) in misp-project (CVE-2021-3184)
cross-site scripting in misp-project (CVE-2021-3184). Risk of unauthorized operations or information disclosure.
CVE-2021-25325 Cross-Site Scripting (XSS) in misp-project (CVE-2021-25325)
cross-site scripting in misp-project (CVE-2021-25325). Risk of unauthorized operations or information disclosure.
CVE-2021-25324 Cross-Site Scripting (XSS) in misp-project (CVE-2021-25324)
cross-site scripting in misp-project (CVE-2021-25324). Risk of unauthorized operations or information disclosure.
CVE-2020-35262 Cross-Site Scripting (XSS) in digisol (CVE-2020-35262)
cross-site scripting in digisol (CVE-2020-35262). Risk of unauthorized operations or information disclosure.
CVE-2020-25498 Cross-Site Scripting (XSS) in beetel (CVE-2020-25498)
cross-site scripting in beetel (CVE-2020-25498). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →