1738 matches found
CVE-2020-11626: Improper Neutralization of Input During Web Page Generation
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. Two Cross Side Scripting XSS vulnerabilities have been found in the Public Web and the Certificate/CRL download servlets...
CVE-2020-0700: Improper Neutralization of Input During Web Page Generation
A Cross-site Scripting XSS vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'...
CVE-2011-1084: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Smoothwall Express 3...
CVE-2020-8421: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Joomla! before 3.9.15. Inadequate escaping of usernames allows XSS attacks in comactionlogs...
CVE-2019-15586: Improper Neutralization of Input During Web Page Generation
A XSS exists in Gitlab CE/EE 12.1.10 in the Mermaid plugin...
CVE-2013-0286: Improper Neutralization of Input During Web Page Generation
Pinboard 1.0.6 theme for Wordpress has XSS...
CVE-2020-6843: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83959...
CVE-2019-14863: Improper Neutralization of Input During Web Page Generation
There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...
CVE-2019-14862: Improper Neutralization of Input During Web Page Generation
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...
CVE-2013-4692: Improper Neutralization of Input During Web Page Generation
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS...
CVE-2009-5049: Improper Neutralization of Input During Web Page Generation
WebApp JSP Snoop page XSS in jetty though 6.1.21...
CVE-2015-9505: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads EDD core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because addqueryarg is misused...
CVE-2015-9532: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads EDD Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
CVE-2015-9522: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads EDD QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
CVE-2019-17179: Improper Neutralization of Input During Web Page Generation
4.1.0, 4.1.1, 4.1.2, 4.1.2.3, 4.1.2.6, 4.1.2.7, 4.2.0, 4.2.1, 4.2.2, 5.0.0, 5.0.0.5, 5.0.0.6, 5.0.1, 5.0.1.1, 5.0.1.2, 5.0.1.3, 5.0.1.4, 5.0.1.5, 5.0.1.6, 5.0.1.7, 5.0.2, fixed in version 5.0.2.1...
CVE-2019-11656: Improper Neutralization of Input During Web Page Generation
Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2019-14911: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly escape output on error, leading to reflected XSS...
CVE-2019-13538: Improper Neutralization of Input During Web Page Generation
3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source...