Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21551

21551 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2023-2058 EyouCms HTTP POST Request cross site scripting — EyouCms 2.4 Low2023-04-14
CVE-2023-2057 EyouCms New Picture cross site scripting — EyouCms 2.4 Low2023-04-14
CVE-2023-2055 Campcodes Advanced Online Voting System config_save.php cross site scripting — Advanced Online Voting System 3.5 Low2023-04-14
CVE-2023-2044 Control iD iDSecure Dispositivos Page cross site scripting — iDSecure 3.5 Low2023-04-14
CVE-2023-26123 raylib 跨站脚本漏洞 — raysan5/raylib 6.1 Medium2023-04-14
CVE-2022-45358 WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS) — Activello 5.4 Medium2023-04-13
CVE-2022-44625 WordPress Cyklodev WP Notify Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS) — Cyklodev WP Notify 4.8 Medium2023-04-13
CVE-2022-45064 Apache Sling Engine: Include-based XSS — Apache Sling Engine 8.0 High2023-04-13
CVE-2023-2014 Cross-site Scripting (XSS) - Generic in microweber/microweber — microweber/microweber 4.8 -2023-04-13
CVE-2023-2021 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass — nilsteampassnet/teampass 5.4 -2023-04-13
CVE-2023-28313 Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability — Send Customer Voice survey from Dynamics 365 6.1 Medium2023-04-11
CVE-2023-28314 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.0 6.1 Medium2023-04-11
CVE-2023-28309 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.0 7.6 High2023-04-11
CVE-2023-1988 SourceCodester Online Computer and Laptop Store cross site scripting — Online Computer and Laptop Store 3.5 Low2023-04-11
CVE-2022-43955 Fortinet FortiWeb 跨站脚本漏洞 — FortiWeb 8.0 High2023-04-11
CVE-2022-43952 Fortinet FortiADC 跨站脚本漏洞 — FortiADC 3.3 Low2023-04-11
CVE-2022-41330 Fortinet FortiOS 跨站脚本漏洞 — FortiProxy 8.3 High2023-04-11
CVE-2022-3695 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation — Pentaho Business Analytics Server 6.5 Medium2023-04-11
CVE-2023-27499 Cross-Site Scripting (XSS) vulnerability in SAP GUI for HTML — GUI for HTML 6.1 Medium2023-04-11
CVE-2018-25084 Ping Identity Self-Service Account Manager SSAMController.java cross site scripting — Self-Service Account Manager 3.5 Low2023-04-10
CVE-2023-26120 xxl-job 跨站脚本漏洞 — com.xuxueli:xxl-job 5.4 Medium2023-04-10
CVE-2014-125098 Dart http_server Directory Listing virtual_directory.dart VirtualDirectory cross site scripting — http_server 4.3 Medium2023-04-10
CVE-2014-125097 BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scripting — Facebook Like Button 3.5 Low2023-04-10
CVE-2014-125096 Fancy Gallery Plugin Options Page class.options.php cross site scripting — Fancy Gallery Plugin 3.5 Low2023-04-10
CVE-2009-10004 Turante Sandbox Theme functions.php sandbox_body_class cross site scripting — Sandbox Theme 3.5 Low2023-04-09
CVE-2014-125095 BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scripting — Contact Form Plugin 3.5 Low2023-04-09
CVE-2023-1961 SourceCodester Online Computer and Laptop Store cross site scripting — Online Computer and Laptop Store 2.4 Low2023-04-08
CVE-2015-10098 Broken Link Checker Plugin ui_get_action_links cross site scripting — Broken Link Checker Plugin 3.5 Low2023-04-08
CVE-2023-1948 PHPGurukul BP Monitoring Management System Add New Family Member add-family-member.php cross site scripting — BP Monitoring Management System 3.5 Low2023-04-08
CVE-2023-1946 SourceCodester Survey Application System Add New cross site scripting — Survey Application System 2.4 Low2023-04-07

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21551 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.