CVE-2018-18262: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...

PT-2018-18042

Name of the Vulnerable Software and Affected Versions ZTE MF65 versions prior to V1.0.0B05 ZTE MF65M1 versions prior to V1.0.0B02 Description The issue is related to cross-site scripting due to improper neutralization of input during web page generation. This could allow an attacker to conduct...

CVE-2018-7447: Improper Neutralization of Input During Web Page Generation

mojoPortal through 2.6.0.0 is prone to multiple persistent cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. The 'Title' and 'Subtitle' fields of the 'Blog' page are vulnerable. NOTE: The software maintainer disputes this as a vulnerability because the fields...

CVE-2017-16880: Improper Neutralization of Input During Web Page Generation

The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS...

CVE-2017-11612: Improper Neutralization of Input During Web Page Generation

In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components...

CVE-2017-0890: Improper Neutralization of Input During Web Page Generation

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue...