CWE-80: Basic XSS
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.
Also known as Improper Neutralization of Script-Related HTML Tags in a Web Page.
A kind of CWE-79 Cross-site Scripting.
From the CWE List. © The MITRE Corporation.
Newest
- bplugins html5 audio playerWordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.4.7.19.1 +1 moreReflected XSS in SystemsController.java in spacewalk-java5.6 Medium
- yiiframework yiiYii does not prevent XSS in scenarios where fallback error renderer is used6.1 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability4.3 Medium
- aviplugins videosWordPress Videos plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- hcl software devops deploy / hcl launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability5.4 Medium
- apache ofbizApache OFBiz: Stored XSS Vulnerability6.1 Medium
- usebruno brunoBruno XSS On Environment Name8.7 High
- open-emr openemrOpenEMR Stored XSS in OpenEMR Bronchitis Form8.4 High
- cal.comWordPress Cal.com plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- vasilis triantafyllou flag iconsWordPress Flag Icons plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- improve my city my cityWordPress Improve My City plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- cornershop better section navigation widgetWordPress Better Section Navigation Widget plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- videowhisper micropaymentsWordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection5.4 Medium
- httpbingo go-httpbinReflected XSS in go-httpbin due to unrestricted client control over Content-Type6.1 Medium
- code-projects online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting ...3.2 Low
- fabian online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting ...4.1 Medium
- fabian online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting ...5.9 Medium
- code-projects online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting ...4.6 Medium
- tripetto, tripetto wordpress form builder plugin for contact forms, surveys and quizzes – tripetto +1 moreWordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.9 - Unauthenticated Stored Cross-Site Scripting7.2 High
- phpgurukul user registration \& login and user management systemA HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User...5.3 Medium
- thepluginpeople enterprise mail handlerAn authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise...6.5 Medium
- bmc remedy mid-tierAn issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML...4.2 Medium
- froxlorFroxlor has an HTML Injection Vulnerability5.5 Medium
- matrix-org pineconeIn-memory stored Cross-site scripting (XSS) vulnerability in pineconesim6.1 Medium
- enalean tuleapTuleap allows XSS via the tracker names used in the semantic timeframe deletion message4.8 Medium
- eastnets paymentsafeEastnets PaymentSafe Edit Manual Reply directRouter.rfc cross site scripting5.1 Medium
getformwork/formworkPackagistFormwork has a cross-site scripting (XSS) vulnerability in Site title4.7 Medium- cyberark endpoint privilege managerHTML injection in CyberArk Endpoint Privilege Manager2.0 Low
- leantimeLeantime affected by Improper Neutralization of HTML Tags5.4 Medium
- ckeditor ckeditor5Cross-site scripting (XSS) in the real-time collaboration package2.3 Low
- ibm openpages with watsonIBM OpenPages HTML injection5.4 Medium
- phpjabbers car park booking systemPHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name,...6.1 Medium
- themepoints super testimonials, super testimonial – testimonial & customer review slider plugin for wordpress +1 moreSuper Testimonials <= 4.0.1 - Unauthenticated Stored Cross-Site Scripting7.2 High
- apache atlasApache Atlas: An authenticated user can perform XSS and potentially impersonate another user7.1 High
- dell update manager pluginDell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization...2.6 Low
- ibm aspera sharesIBM Aspera Shares HTML injection4.8 Medium
- roundcube webmailCross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated...6.1 Medium
- pimcorePimcore Search Document cross site scripting5.1 Medium
- wpexperts wp multi store locator, wpexperts.io wp multistore locator +1 moreWordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- ibm control centerIBM Control Center cross-site scripting5.4 Medium
- listamesterWordPress Listamester Plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ayecode ketchup shortcodesWordPress Ketchup Shortcodes Plugin <= 0.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ella van durpe slides & presentationsWordPress Slides & Presentations Plugin <= 0.0.39 - Content Injection vulnerability5.4 Medium
- wavlink ac3000, wl-wn533a8 firmware +1 moreA cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode()...9.6 Critical
- fortinet fortiportalAn improper neutralization of script-related html tags in a web page (basic xss) in Fortinet...3.3 Low
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM DevOps Deploy / IBM UrbanCode Deploy HTML injection3.1 Low
- starcitizentools mediawiki-extensions-tabberneueCross-site Scripting in TabberTransclude in Extension:TabberNeue8.6 High
- phpmyfaqphpMyFAQ Vulnerable to Stored HTML Injection at FAQ5.2 Medium
- Show moreLoading…