CWE-80: Basic XSS
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.
Also known as Improper Neutralization of Script-Related HTML Tags in a Web Page.
A kind of CWE-79 Cross-site Scripting.
From the CWE List. © The MITRE Corporation.
Newest
- phplistPHPList Reflected cross site scriting4.3 Medium
- humhubHumHub DOM cross site scriting4.3 Medium
- humhubHumHub Reflected cross site scriting4.3 Medium
- wolfcms wolf cmsWolfCMS User Add cross site scripting3.5 Low
- gogsXSS vulnerability in repository issue list in Gogs5.4 Medium
- sialweb cmsSialWeb CMS Search cross site scriting3.5 Low
- xwiki, xwiki xwiki-platform +1 moreCross-site Scripting in Filter Stream Converter Application in XWiki Platform7.4 High
- cisco ucs directorCisco UCS Director JavaScript Cross-Site Scripting Vulnerability4.8 Medium
- xwiki, xwiki xwiki-platform +1 moreCross-site Scripting in the Flamingo theme manager7.4 High
- xwiki, xwiki xwiki-platform +1 moreCross-site Scripting in XWiki Platform Wiki UI Main Wiki7.4 High
- inhand networks inrouter302, inhandnetworks inrouter302 firmware +1 moreA cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand...5.4 Medium
- cisco firepower management center 6.1.0, secure firewall management center +1 moreCisco Firepower Management Center Software Cross-Site Scripting Vulnerability6.1 Medium
- lansweeperA stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of...9.1 Critical
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...6.1 Medium
- unknown ns woocommerce watermark, nsthemes ns watermark for woocommerce +1 moreNS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality7.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being rendered5.7 Medium
- profelis sambaboxStored Cross-Site Scripting (XSS)3.8 Low
- pro2col stingray ftsPro2col Stingray FTS cross site scriting5.5 Medium
- ibm iss blackice pc protection, iss blackice pc protection +1 moreISS BlackICE PC Protection Update cross site scriting5.0 Medium
- mattermostHTML Injection while inviting Guests2.0 Low
- syliusBasic Cross-site Scripting and Unrestricted Upload of File with Dangerous Type in Sylius6.1 Medium
- siemens comos, comos v10.2, comos v10.3 +1 more +3 moreA vulnerability has been identified in COMOS (All versions < V10.4.1). The COMOS Web component of...6.1 Medium
- jcubic jquery.terminalSelf XSS on user input3.7 Low
- getkirby kirbyCross-site scripting (XSS) from image block content in the site frontend7.3 High
- learnpressLearnPress – WordPress LMS Plugin <= 4.1.3.1 Authenticated Stored Cross-Site Scripting5.5 Medium
- jupyter notebookFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook10.0 Critical
- vapor leafkit, leaf-kit +1 moreLeafKit allows XSS with untrusted user input7.4 High
- getkirby kirbyCross-site scripting (XSS) from field and configuration text displayed in the Panel7.1 High
- qnap systems inc. q'center, qnap q\'center +1 moreStored XSS Vulnerability in Q'center5.4 Medium
- qnap qulog centerStored XSS Vulnerability in QuLog Center6.1 Medium
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin3.1 Low
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI3.1 Low
- hedgedocImproper Neutralization of Script-Related HTML Tags in Notes8.1 High
- birb-digital wrongthinkSelf-XSS6.1 Medium
- vaadin, vaadin vaadin-server +1 moreStored cross-site scripting in Grid component in Vaadin 7 and 85.4 Medium
- qnap qts, quts hero, qutscloud +2 moreCross-site Scripting Vulnerability in File Station6.1 Medium
- nextcloud nextcloud-dialogs, nextcloud\/dialogs project nextcloud\/dialogs +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs4.6 Medium
- cisco webex meetingsCisco Webex Meetings HTML Injection Vulnerability4.7 Medium
- micro focus solutions business managerMicro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are...4.9 Medium
- cisco webex meetingsCisco Webex Meetings Cross-Site Scripting Vulnerability6.1 Medium
- qnap photo stationCross-site Scripting Vulnerability in Photo Station6.1 Medium
- phpgacl, open-emr openemr +1 moreA cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A...9.6 Critical
- phpgacl, open-emr openemr +1 moreA cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A...9.6 Critical
- phpgacl, open-emr openemr +1 moreA cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A...9.6 Critical
- qnap qesStored cross-site scripting vulnerability in QES9.0 Critical
- siemens xhqA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow...5.4 Medium
- qnap qts, quts hero +1 moreCross-site scripting vulnerability in QTS and QuTS hero6.1 Medium
- qnap qts, quts hero +1 moreCross-site scripting vulnerability in QTS and QuTS hero6.1 Medium
- qnap qts, quts hero +1 moreCross-site scripting vulnerability in QTS and QuTS hero6.1 Medium
- qnap qts, quts hero +1 moreCross-site scripting vulnerability in QTS and QuTS hero6.1 Medium
- Show moreLoading…