Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21529

21529 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2021-47699 Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form — XI 4.8AIMediumAI2025-10-30
CVE-2023-53688 Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay — XI 8.8AIHighAI2025-10-30
CVE-2020-36862 Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts — XI 6.1AIMediumAI2025-10-30
CVE-2022-50587 Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text — XI 4.8AIMediumAI2025-10-30
CVE-2022-50586 Nagios XI < 5.8.9 Stored XSS via BPI Info URL — XI 4.8AIMediumAI2025-10-30
CVE-2022-50588 Nagios XI < 5.8.9 Stored XSS in Update Checking — XI 4.8AIMediumAI2025-10-30
CVE-2024-13993 Nagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers — XI 6.1AIMediumAI2025-10-30
CVE-2013-10071 Nagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load Functionality — XI 6.1AIMediumAI2025-10-30
CVE-2021-47689 Nagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates Pages — XI 5.4AIMediumAI2025-10-30
CVE-2021-47691 Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Services Page — XI 5.4AIMediumAI2025-10-30
CVE-2022-50584 Nagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion Flows — XI 6.1AIMediumAI2025-10-30
CVE-2020-36861 Nagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages — XI 6.1AIMediumAI2025-10-30
CVE-2021-47690 Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay Modals — XI 6.1AIMediumAI2025-10-30
CVE-2020-36860 Nagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages — XI 5.4AIMediumAI2025-10-30
CVE-2022-50585 Nagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input — XI 5.4AIMediumAI2025-10-30
CVE-2021-47694 Nagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command — XI 6.1AIMediumAI2025-10-30
CVE-2023-7319 Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu — Network Analyzer 6.1AIMediumAI2025-10-30
CVE-2025-34278 Nagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS — Network Analyzer 5.4AIMediumAI2025-10-30
CVE-2023-7321 Nagios Log Server < 2.1.14 XSS via Snapshots Page — Log Server 6.1AIMediumAI2025-10-30
CVE-2023-7323 Nagios Log Server < 2024R1 XSS via Create User Function — Log Server 5.4AIMediumAI2025-10-30
CVE-2020-36858 Nagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages — Log Server 4.8AIMediumAI2025-10-30
CVE-2016-15049 Nagios Log Server < 1.4.2 Dashboards Logs Table XSS — Log Server 6.1AIMediumAI2025-10-30
CVE-2017-20209 Nagios Fusion < 4.0.1 XSS via Users/Servers Page — Fusion 5.4AIMediumAI2025-10-30
CVE-2018-25119 Nagios Fusion < 4.1.5 XSS via fusionwindow Parameter — Fusion 6.1AIMediumAI2025-10-30
CVE-2023-53689 Nagios Fusion < 4.2.0 License Information Reflected XSS — Fusion 6.1AIMediumAI2025-10-30
CVE-2023-53690 Nagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS — Fusion 5.4AIMediumAI2025-10-30
CVE-2023-7312 Nagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail — Fusion 4.8AIMediumAI2025-10-30
CVE-2025-62265 Liferay Portal和Liferay DXP 跨站脚本漏洞 — Portal 5.4AIMediumAI2025-10-30
CVE-2025-64112 Statmatic vulnerable to Stored Cross-Site Scripting — cms 8.0 High2025-10-30
CVE-2025-36592 Dell Secure Connect Gateway Policy Manager 跨站脚本漏洞 — Secure Connect Gateway SCG Policy Manager 5.4 Medium2025-10-30

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21529 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.