CWE-82: Improper Neutralization of Script in Attributes of IMG Tags in a Web Page
The web application does not neutralize or incorrectly neutralizes scripting elements within attributes of HTML IMG tags, such as the src attribute.
A kind of CWE-83 Improper Neutralization of Script in Attributes in a Web Page.
From the CWE List. © The MITRE Corporation.
Newest
- zammad Zammad: Improper neutralization of `srcset` attribute in IMG tags in Zammad 5.3 Medium
- crocoblock jetengine WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability 8.5 High
- saso nikolov event tickets with ticket scanner WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability 9.9 Critical
- supsystic popup, popup by supsystic +1 more WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability 9.1 Critical
- eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability 9.1 Critical
- supsystic contact form by supsystic, contact form +1 more WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability 9.1 Critical
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +1 more +3 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability 9.1 Critical
- palantir foundry frontend, com.palantir.foundry:foundry-frontend +1 more Stored XSS in Foundry Slate Query Dropdown menu 5.4 Medium