XSS vulnerability in FortiClientEMS

An Improper Neutralization of Input During Web Page Generation in FortiClientEMS may allow a remote attacker to execute unauthorized code by injecting malicious payload in the user profile of a FortiClient instance being managed by the vulnerable system...

CVE-2017-18590: Improper Neutralization of Input During Web Page Generation

The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues...

CVE-2017-18555: Improper Neutralization of Input During Web Page Generation

The booking-sms plugin before 1.1.0 for WordPress has XSS...

CVE-2017-18500: Improper Neutralization of Input During Web Page Generation

The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues...

CVE-2016-10877: Improper Neutralization of Input During Web Page Generation

The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues...

CVE-2017-18508: Improper Neutralization of Input During Web Page Generation

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS...

CVE-2019-11715: Improper Neutralization of Input During Web Page Generation

Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...

CVE-2019-1010091

tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code execution. The component is: Media element. The attack vector is: The victim must paste malicious content to media element's embed tab...

CVE-2019-1010091

tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code execution. The component is: Media element. The attack vector is: The victim must paste malicious content to media element's embed tab...

CVE-2019-1010091

tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code execution. The component is: Media element. The attack vector is: The victim must paste malicious content to media element's embed tab...

CVE-2019-1010091

CVE-2019-1010091 affects TinyMCE 4.7.11/4.7.12 (Media element). The root cause is improper input neutralization (CWE-79) in the media element, enabling JavaScript execution when a user pastes malicious content into the media element embed tab. Impact is client-side code execution with low attack ...

CVE-2019-1010091

Removed by vendor...

PT-2019-11462

Name of the Vulnerable Software and Affected Versions: tinymce versions 4.7.11 through 4.9.9 tinymce versions 5.2.1 and earlier Description: The issue allows for JavaScript code execution due to improper neutralization of input during web page generation, specifically affecting the Media element...

CVE-2018-11734: Improper Neutralization of Input During Web Page Generation

In e107 v2.1.7, output without filtering results in XSS...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

Siemens CP 1604 and 1616 <= v2.8 Improper Neutralization of Input during Web Page Generation

Binary data 720258.prm...

CVE-2019-6562

In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2019-6562

In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2018-13104: Improper Neutralization of Input During Web Page Generation

OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 Bug ID...

CVE-2019-6595: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in F5 BIG-IP Access Policy Manager APM 11.5.x and 11.6.x Admin Web UI...