CWE-80: Basic XSS
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.
Also known as Improper Neutralization of Script-Related HTML Tags in a Web Page.
A kind of CWE-79 Cross-site Scripting.
From the CWE List. © The MITRE Corporation.
Newest
- mygraph project mygraphImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph5.4 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form8.9 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list8.9 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Web Parent POM vulnerable to XSS in the attachment history8.9 High
- discourse discourse-chatDiscourse-Chat Cross-Site Scripting issue for channel names and descriptions5.4 Medium
- keycloak, redhat single sign-on +1 moreStored Cross-Site Scripting (XSS) in Keycloak via groups dropdown5.4 Medium
- apache artemis, apache software foundation activemq artemis, netapp active iq unified manager +1 more +3 moreHTML Injection in ActiveMQ Artemis Web Console6.1 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +239 more +241 moreA vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE SC-600...6.8 Medium
- eyoucmsAn issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an...5.4 Medium
- thalesgroup citadel, thales citadel macosx desktop client, citadel web client +1 more +3 moreXSS vulnerability in Citadel5.7 Medium
- ambit movie portal scriptItech Movie Portal Script movie.php Reflected cross site scripting4.3 Medium
- cisco iot control centerCisco IoT Control Center Cross-Site Scripting Vulnerability6.1 Medium
- bitrix site manager, bitrix24 bitrix site manager +1 moreBitrix Site Manager Contact Form cross site scripting3.5 Low
- devolutions serverTrueConf Server DOM cross site scripting3.5 Low
- devolutions serverTrueConf Server group DOM cross site scripting3.5 Low
- devolutions serverTrueConf Server Reflected cross site scripting3.5 Low
- devolutions serverTrueConf Server Reflected cross site scripting3.5 Low
- devolutions serverTrueConf Server Reflected cross site scripting3.5 Low
- devolutions serverTrueConf Server Stored cross site scripting3.5 Low
- easy table project table, unspecified easy table plugin +1 moreEasy Table Plugin options-general.php cross site scripting3.5 Low
- unspecified admin custom login plugin, weblizar admin custom login +1 moreAdmin Custom Login Plugin Persistent cross site scripting3.5 Low
- air transfer project transfer, unspecified air transfer +1 moreAir Transfer cross site scripting3.5 Low
- wire wire-webappCross Site Scripting in Wire Messages9.6 Critical
- unspecified wp-filebase download manager plugin, wp-filebase download manager project download manager +1 moreWP-Filebase Download Manager Plugin cross site scriting3.5 Low
- unspecified wp-spamfree anti-spam plugin, wp-spamfree anti-spam project anti-spam +1 moreWP-SpamFree Anti-Spam Plugin cross site scriting3.5 Low
- newstatpress project newstatpress, unspecified newstatpress plugin +1 moreNewStatPress Plugin Persistent cross site scriting3.5 Low
- unspecified google analytics dashboard plugin, yoast google analytics dashboard +1 moreGoogle Analytics Dashboard Plugin cross site scriting3.5 Low
- gwolle guestbook project guestbook, unspecified gwolle guestbook plugin +1 moreGwolle Guestbook Plugin cross site scriting3.5 Low
- unspecified alpine phototile for instagram plugin, thealpinepress alpine-photo-tile-for-instagram +1 moreAlpine PhotoTile for Instagram Plugin cross site scriting3.5 Low
- bytesforall atahualpa, unspecified atahualpa theme +1 moreAtahualpa Theme cross site scriting3.5 Low
- elefant cms, elefantcms elefant cms +1 moreElefant CMS extended Reflected cross site scriting4.3 Medium
- elefant cms, elefantcms elefant cms +1 moreElefant CMS Blog Post Persistent cross site scriting3.5 Low
- elefant cms, elefantcms elefant cms +1 moreElefant CMS Title Persistent cross site scriting3.5 Low
- elefant cms, elefantcms +1 moreElefant CMS Version Comparison Persistent cross site scriting4.3 Medium
- elefant cms, elefantcms elefant cms +1 moreElefant CMS Persistent cross site scriting4.3 Medium
- intechnosoftware user login log, weblizar user login log plugin +1 moreweblizar User Login Log Plugin Stored cross site scriting3.5 Low
- bestwebsoft contact form plugin, contact form +1 moreBestWebSoft Contact Form Plugin Stored cross site scriting3.5 Low
- xyzscripts contact form manager plugin, contact form manager +1 moreXYZScripts Contact Form Manager Plugin cross site scriting3.5 Low
- navetti pricepointNavetti PricePoint Reflected cross site scriting4.3 Medium
- navetti pricepointNavetti PricePoint Persistent cross site scriting4.3 Medium
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RgUrlBlock.asp Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RgDhcp Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RgDdns Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RgTime Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RGFirewallEL Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 wlanPrimaryNetwork Persistent cross site scripting3.5 Low
django-jsonformPyPICross Site Scripting vulnerability in django-jsonform's admin form.No score- phplistPHPList Bounce Rule Persistent cross site scriting3.5 Low
- phplistPHPList Subscribe Persistent cross site scriting3.5 Low
- phplistPHPList List Name Persistent cross site scriting3.5 Low
- Show moreLoading…