CVE-2017-2135: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-15211

Name of the Vulnerable Software and Affected Versions WP Statistics versions prior to 12.0.5 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For WP Statistics versions prior to 12.0.5, update to version 12.0.5 or later to...

PT-2017-15212

Name of the Vulnerable Software and Affected Versions WN-AC1167GR firmware versions 1.04 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For WN-AC1167GR firmware versions 1.04 and earlier, update to...

PT-2017-15159

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.3 Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For versions 3.0.0 through 4.2.3, update to a version that contai...

PT-2017-15185

Name of the Vulnerable Software and Affected Versions WBCE CMS versions 1.1.10 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For WBCE CMS versions 1.1.10 and earlier, at the moment, there is no information abou...

PT-2017-15215

Name of the Vulnerable Software and Affected Versions Booking Calendar versions 7.1 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 7.1 and earlier, update to a version later than 7.1 to resolve the...

CVE-2016-6519

Cross-site scripting XSS vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the "Create Share" form...

CVE-2016-6519

Cross-site scripting XSS vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the "Create Share" form...

Cross site scripting

Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6333

Cross-site scripting XSS vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css...

Cross site scripting

Cross-site scripting XSS vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving replacement of percent encoding in unclosed internal...

CVE-2016-5760

Multiple cross-site scripting XSS vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the 1 token parameter to gwadmin-console/install/login.jsp or 2 PATHINFO to...

CVE-2016-6333

Cross-site scripting XSS vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css...

CVE-2016-6333

Cross-site scripting XSS vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css...

PT-2017-8971

Name of the Vulnerable Software and Affected Versions RESTEasy affected versions not specified Description A cross-site scripting XSS issue exists in the default exception handler of RESTEasy, allowing remote attackers to inject arbitrary web script or HTML. Recommendations At the moment, there i...

CVE-2016-4870

CVE-2016-4870 is a cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0, exploitable via the Schedule function by a remote, authenticated attacker who can inject script or HTML into the victim’s browser. Affected product: Cybozu Office versions 9.0.0–10.4.0. Root cause: improper ha...

Cross site scripting

Cross-site scripting XSS vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the IVYWE 1 Assist plugin before 1.1.2.test20160906, 2 dataBox plugin before 0.0.0.20160906, and 3 userBox plugin before 0.0.0.20160906 for Geeklog allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4888: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-8585

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus versions prior to 9.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 9.2, update to version 9.2 or later to resol...