CVE-2017-18567: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.4.6 for WordPress has XSS...

CVE-2017-18568: Improper Neutralization of Input During Web Page Generation

The my-wp-translate plugin before 1.0.4 for WordPress has XSS...

CVE-2019-0337: Improper Neutralization of Input During Web Page Generation

Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs and allows an attacker to execute malicious scripts in the url thereby resulting in Reflected Cross-Site Scripting XSS vulnerability...

CVE-2016-10881: Improper Neutralization of Input During Web Page Generation

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...

CVE-2015-9300: Improper Neutralization of Input During Web Page Generation

The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues...

CVE-2015-9302: Improper Neutralization of Input During Web Page Generation

The simple-fields plugin before 1.4.11 for WordPress has XSS...

CVE-2015-9297: Improper Neutralization of Input During Web Page Generation

The events-manager plugin before 5.6 for WordPress has XSS...

CVE-2017-18501: Improper Neutralization of Input During Web Page Generation

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2019-14945: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 2.0.54 for WordPress has XSS...

CVE-2019-14967: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability...

CVE-2017-18503: Improper Neutralization of Input During Web Page Generation

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

CVE-2016-10875: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.1 for WordPress has XSS...

CVE-2016-10873: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.3 for WordPress has XSS...

CVE-2017-18400: Improper Neutralization of Special Elements used in a Command

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

CVE-2019-1020010: Improper Neutralization of Input During Web Page Generation

Misskey before 10.102.4 allows hijacking a user's token...

CVE-2019-9811: Improper Neutralization of Special Elements in Output Used by a Downstream Component

As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...

CVE-2018-19574: Improper Neutralization of Input During Web Page Generation

GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth authorization page...

CVE-2019-0326: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform BI Workspace Enterprise, versions 4.1, 4.2, 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-13478: Improper Neutralization of Input During Web Page Generation

The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...

CVE-2017-15694: Improper Neutralization of Argument Delimiters in a Command

When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster...