Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: xss Clear
ID Title
CVE-2020-29231 Cross-Site Scripting (XSS) in egavilanmedia (CVE-2020-29231)
cross-site scripting in egavilanmedia (CVE-2020-29231). Risk of unauthorized operations or information disclosure.
CVE-2020-29477 Cross-Site Scripting (XSS) in invisioncommunity (CVE-2020-29477)
cross-site scripting in invisioncommunity (CVE-2020-29477). Risk of unauthorized operations or information disclosure.
CVE-2020-29230 Cross-Site Scripting (XSS) in egavilanmedia (CVE-2020-29230)
cross-site scripting in egavilanmedia (CVE-2020-29230). Risk of unauthorized operations or information disclosure.
CVE-2020-29247 Cross-Site Scripting (XSS) in wondercms (CVE-2020-29247)
cross-site scripting in wondercms (CVE-2020-29247). Risk of unauthorized operations or information disclosure.
CVE-2020-35274 Cross-Site Scripting (XSS) in dotcms (CVE-2020-35274)
cross-site scripting in dotcms (CVE-2020-35274). Risk of unauthorized operations or information disclosure.
CVE-2020-35275 Cross-Site Scripting (XSS) in coastercms (CVE-2020-35275)
cross-site scripting in coastercms (CVE-2020-35275). Risk of unauthorized operations or information disclosure.
CVE-2020-28859 Cross-Site Scripting (XSS) in openasset (CVE-2020-28859)
cross-site scripting in openasset (CVE-2020-28859). Risk of unauthorized operations or information disclosure.
CVE-2020-28857 Cross-Site Scripting (XSS) in openasset (CVE-2020-28857)
cross-site scripting in openasset (CVE-2020-28857). Risk of unauthorized operations or information disclosure.
CVE-2020-29572 Cross-Site Scripting (XSS) in misp-project (CVE-2020-29572)
cross-site scripting in misp-project (CVE-2020-29572). Risk of unauthorized operations or information disclosure.
CVE-2020-28210 Cross-Site Scripting (XSS) in schneider-electric (CVE-2020-28210)
cross-site scripting in schneider-electric (CVE-2020-28210). Risk of unauthorized operations or information disclosure.
CVE-2020-28947 Cross-Site Scripting (XSS) in misp-project (CVE-2020-28947)
cross-site scripting in misp-project (CVE-2020-28947). Risk of unauthorized operations or information disclosure.
CVE-2020-21731 Cross-Site Scripting (XSS) in gazie-project (CVE-2020-21731)
cross-site scripting in gazie-project (CVE-2020-21731). Risk of unauthorized operations or information disclosure.
CVE-2020-21732 Cross-Site Scripting (XSS) in rukovoditel (CVE-2020-21732)
cross-site scripting in rukovoditel (CVE-2020-21732). Risk of unauthorized operations or information disclosure.
CVE-2020-21733 Cross-Site Scripting (XSS) in sagemcom (CVE-2020-21733)
cross-site scripting in sagemcom (CVE-2020-21733). Risk of unauthorized operations or information disclosure.
CVE-2020-24194 Cross-Site Scripting (XSS) in daily-tracker-system-project (CVE-2020-24194)
cross-site scripting in daily-tracker-system-project (CVE-2020-24194). Risk of unauthorized operations or information disclosure.
CVE-2020-23450 Cross-Site Scripting (XSS) in spiceworks (CVE-2020-23450)
cross-site scripting in spiceworks (CVE-2020-23450). Risk of unauthorized operations or information disclosure.
CVE-2020-24917 Cross-Site Scripting (XSS) in enhancesoft (CVE-2020-24917)
cross-site scripting in enhancesoft (CVE-2020-24917). Risk of unauthorized operations or information disclosure.
CVE-2020-16193 Cross-Site Scripting (XSS) in enhancesoft (CVE-2020-16193)
cross-site scripting in enhancesoft (CVE-2020-16193). Risk of unauthorized operations or information disclosure.
CVE-2020-13153 Cross-Site Scripting (XSS) in misp-project (CVE-2020-13153)
cross-site scripting in misp-project (CVE-2020-13153). Risk of unauthorized operations or information disclosure.
CVE-2019-14748 Cross-Site Scripting (XSS) in enhancesoft (CVE-2019-14748)
cross-site scripting in enhancesoft (CVE-2019-14748). Risk of unauthorized operations or information disclosure.
CVE-2019-11814 Cross-Site Scripting (XSS) in misp-project (CVE-2019-11814)
cross-site scripting in misp-project (CVE-2019-11814). Risk of unauthorized operations or information disclosure.
CVE-2019-11813 Cross-Site Scripting (XSS) in misp-project (CVE-2019-11813)
cross-site scripting in misp-project (CVE-2019-11813). Risk of unauthorized operations or information disclosure.
CVE-2019-11812 Cross-Site Scripting (XSS) in misp-project (CVE-2019-11812)
cross-site scripting in misp-project (CVE-2019-11812). Risk of unauthorized operations or information disclosure.
CVE-2018-19953 KEV [KEV] Cross-Site Scripting (XSS) in Qnap network-attached-storage-nas (CVE-2018-19953)
cross-site scripting in Qnap network-attached-storage-nas (CVE-2018-19953). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-19943 KEV [KEV] Cross-Site Scripting (XSS) in Qnap network-attached-storage-nas (CVE-2018-19943)
cross-site scripting in Qnap network-attached-storage-nas (CVE-2018-19943). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2022-29004 Cross-Site Scripting (XSS) in phpgurukul (CVE-2022-29004)
cross-site scripting in phpgurukul (CVE-2022-29004). Risk of unauthorized operations or information disclosure.
CVE-2022-29005 Cross-Site Scripting (XSS) in phpgurukul (CVE-2022-29005)
cross-site scripting in phpgurukul (CVE-2022-29005). Risk of unauthorized operations or information disclosure.
CVE-2022-0900 Cross-Site Scripting (XSS) in netdatasoft (CVE-2022-0900)
cross-site scripting in netdatasoft (CVE-2022-0900). Risk of unauthorized operations or information disclosure.
CVE-2018-7795 Cross-Site Scripting (XSS) in schneider-electric (CVE-2018-7795)
cross-site scripting in schneider-electric (CVE-2018-7795). Risk of unauthorized operations or information disclosure.
CVE-2020-22985 Cross-Site Scripting (XSS) in microstrategy (CVE-2020-22985)
cross-site scripting in microstrategy (CVE-2020-22985). Risk of unauthorized operations or information disclosure.
CVE-2020-22987 Cross-Site Scripting (XSS) in microstrategy (CVE-2020-22987)
cross-site scripting in microstrategy (CVE-2020-22987). Risk of unauthorized operations or information disclosure.
CVE-2020-22986 Cross-Site Scripting (XSS) in microstrategy (CVE-2020-22986)
cross-site scripting in microstrategy (CVE-2020-22986). Risk of unauthorized operations or information disclosure.
CVE-2020-22984 Cross-Site Scripting (XSS) in microstrategy (CVE-2020-22984)
cross-site scripting in microstrategy (CVE-2020-22984). Risk of unauthorized operations or information disclosure.
CVE-2022-28077 Cross-Site Scripting (XSS) in home-owners-collection-management-system-project (CVE-2022-28077)
cross-site scripting in home-owners-collection-management-system-project (CVE-2022-28077). Risk of unauthorized operations or information disclosure.
CVE-2022-28078 Cross-Site Scripting (XSS) in home-owners-collection-management-system-project (CVE-2022-28078)
cross-site scripting in home-owners-collection-management-system-project (CVE-2022-28078). Risk of unauthorized operations or information disclosure.
CVE-2021-43712 Cross-Site Scripting (XSS) in employee-daily-task-management-system-project (CVE-2021-43712)
cross-site scripting in employee-daily-task-management-system-project (CVE-2021-43712). Risk of unauthorized operations or information disclosure.
CVE-2021-31673 Cross-Site Scripting (XSS) in cyclos (CVE-2021-31673)
cross-site scripting in cyclos (CVE-2021-31673). Risk of unauthorized operations or information disclosure.
CVE-2022-28102 Cross-Site Scripting (XSS) in php-mysql-admin-panel-generator-project (CVE-2022-28102)
cross-site scripting in php-mysql-admin-panel-generator-project (CVE-2022-28102). Risk of unauthorized operations or information disclosure.
CVE-2022-26596 Cross-Site Scripting (XSS) in liferay (CVE-2022-26596)
cross-site scripting in liferay (CVE-2022-26596). Risk of unauthorized operations or information disclosure.
CVE-2022-26597 Cross-Site Scripting (XSS) in liferay (CVE-2022-26597)
cross-site scripting in liferay (CVE-2022-26597). Risk of unauthorized operations or information disclosure.
CVE-2022-28094 Cross-Site Scripting (XSS) in online-sports-complex-booking-system-project (CVE-2022-28094)
cross-site scripting in online-sports-complex-booking-system-project (CVE-2022-28094). Risk of unauthorized operations or information disclosure.
CVE-2022-29529 An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.
An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.
CVE-2022-29530 An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters.
An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters.
CVE-2022-29533 Cross-Site Scripting (XSS) in misp-project (CVE-2022-29533)
cross-site scripting in misp-project (CVE-2022-29533). Risk of unauthorized operations or information disclosure.
CVE-2022-29532 Cross-Site Scripting (XSS) in misp-project (CVE-2022-29532)
cross-site scripting in misp-project (CVE-2022-29532). Risk of unauthorized operations or information disclosure.
CVE-2022-29531 Cross-Site Scripting (XSS) in misp-project (CVE-2022-29531)
cross-site scripting in misp-project (CVE-2022-29531). Risk of unauthorized operations or information disclosure.
CVE-2022-26593 Cross-Site Scripting (XSS) in liferay (CVE-2022-26593)
cross-site scripting in liferay (CVE-2022-26593). Risk of unauthorized operations or information disclosure.
CVE-2018-6882 KEV [KEV] Cross-Site Scripting (XSS) in Synacor zimbra-collaboration-suite-zcs (CVE-2018-6882)
cross-site scripting in Synacor zimbra-collaboration-suite-zcs (CVE-2018-6882). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-26594 Cross-Site Scripting (XSS) in liferay (CVE-2022-26594)
cross-site scripting in liferay (CVE-2022-26594). Risk of unauthorized operations or information disclosure.
CVE-2021-43432 Cross-Site Scripting (XSS) in exrick (CVE-2021-43432)
cross-site scripting in exrick (CVE-2021-43432). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →