CVE-2018-7447: Improper Neutralization of Input During Web Page Generation

mojoPortal through 2.6.0.0 is prone to multiple persistent cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. The 'Title' and 'Subtitle' fields of the 'Blog' page are vulnerable. NOTE: The software maintainer disputes this as a vulnerability because the fields...

CVE-2017-16880: Improper Neutralization of Input During Web Page Generation

The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS...

CVE-2017-11612: Improper Neutralization of Input During Web Page Generation

In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components...

CVE-2017-0890: Improper Neutralization of Input During Web Page Generation

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue...