CWE-79: Cross-site Scripting
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Also known as Improper Neutralization of Input During Web Page Generation, XSS, HTML Injection.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Category Description5.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe5.3 Medium
- broadcom symantec endpoint detection and responseCross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console5.4 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass5.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Links Module5.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter5.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename5.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name5.1 Medium
- adobe dimensionDimension | Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting) (CWE-79)8.6 High
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)9.3 Critical
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)9.3 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)9.3 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- linuxfoundation vitessVitess vttablet /twopcz reflected XSS9.8 Critical
- vnotex vnoteVNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration8.2 High
- microsoft exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 14, exchange server 2019 cumulative update 15 +1 more +3 moreMicrosoft Exchange Server Spoofing Vulnerability9.3 Critical
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server subscription edition +1 more +3 moreMicrosoft Office SharePoint Spoofing Vulnerability8.1 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Spoofing Vulnerability4.6 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Spoofing Vulnerability4.6 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Spoofing Vulnerability7.3 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Spoofing Vulnerability4.6 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Spoofing Vulnerability4.6 Medium
- zofe rapyd-adminRapyd Admin before 9.20.0 Stored XSS via rich-text Component2.1 Low
- wallabagwallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import Upload5.1 Medium
- webkul qloappsQloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors5.1 Medium
- webkul qloappsQloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact Value5.1 Medium
- webkul qloappsQloApps through 1.7.0 Reflected XSS via Additional Facility Price Field5.1 Medium
- misskey-dev misskeyMisskey: Cross-site scripting in RSS feed item links8.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)9.3 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.1 High
- Show moreLoading…