Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21546

21546 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2023-1421 Reflected XSS in OAuth flow completion endpoints — Mattermost 3.5 Low2023-03-15
CVE-2022-43874 IBM App Connect Enterprise Certified Container — App Connect Enterprise Certified Container 6.1 Medium2023-03-15
CVE-2023-1418 SourceCodester Friendly Island Pizza Website and Ordering System POST Parameter cashconfirm.php cross site scripting — Friendly Island Pizza Website and Ordering System 3.5 Low2023-03-15
CVE-2022-37402 WordPress AFS Analytics Plugin <= 4.18 is vulnerable to Cross Site Scripting (XSS) — AFS Analytics 4.8 Medium2023-03-15
CVE-2022-34148 WordPress Backup Guard Plugin <= 1.6.9.0 is vulnerable to Cross Site Scripting (XSS) — JetBackup – WP Backup, Migrate & Restore 4.8 Medium2023-03-15
CVE-2023-0322 XSS in Talent Software UNIS — UNIS 6.1 Medium2023-03-15
CVE-2023-23408 Azure Apache Ambari Spoofing Vulnerability — Azure HDInsight 4.5 Medium2023-03-14
CVE-2023-24891 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1 5.4 Medium2023-03-14
CVE-2023-24921 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.0 5.4 Medium2023-03-14
CVE-2023-24919 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.0 5.4 Medium2023-03-14
CVE-2023-23383 Service Fabric Explorer Spoofing Vulnerability — Azure Service Fabric 9.0 for Linux 8.2 High2023-03-14
CVE-2023-1397 SourceCodester Online Student Management System profile.php cross site scripting — Online Student Management System 3.5 Low2023-03-14
CVE-2023-1396 SourceCodester Online Tours & Travels Management System traveller_details.php cross site scripting — Online Tours & Travels Management System 3.5 Low2023-03-14
CVE-2023-1395 SourceCodester Yoga Class Registration System list.php query cross site scripting — Yoga Class Registration System 3.5 Low2023-03-14
CVE-2022-23791 XSS in Firmanet Software and Technology Customer Relation Manager — Customer Relation Manager 6.1 Medium2023-03-14
CVE-2022-23790 XSS in Firmanet Software and Technology Customer Relation Manager — Customer Relation Manager 6.1 Medium2023-03-14
CVE-2021-4195 XSS in Firmanet Software and Technology Customer Relation Manager — Customer Relation Manager 6.1 Medium2023-03-14
CVE-2022-47171 WordPress IP Vault – WP Firewall Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS) — IP Vault – WP Firewall 5.9 Medium2023-03-14
CVE-2023-26457 Cross-Site Scripting (XSS) vulnerability in SAP Content Server — Content Server 6.1 Medium2023-03-14
CVE-2023-0021 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver — SAP NetWeaver 6.1 Medium2023-03-14
CVE-2023-1374 Solidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting — Solidres – Hotel booking plugin for WordPress 4.4 Medium2023-03-13
CVE-2023-1372 WH Testimonials <= 3.0.0 - Unauthenticated Stored Cross-Site Scripting — WH Testimonials 7.2 High2023-03-13
CVE-2023-1363 SourceCodester Computer Parts Sales and Inventory System Add User Account cross site scripting — Computer Parts Sales and Inventory System 3.5 Low2023-03-13
CVE-2023-1359 SourceCodester Gadget Works Online Ordering System Add New User cross site scripting — Gadget Works Online Ordering System 2.4 Low2023-03-12
CVE-2013-10021 dd32 Debug Bar Plugin class-debug-bar-queries.php render cross site scripting — Debug Bar Plugin 3.5 Low2023-03-11
CVE-2023-1354 SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System register.php cross site scripting — Design and Implementation of Covid-19 Directory on Vaccination System 3.5 Low2023-03-11
CVE-2023-1353 SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System verification.php cross site scripting — Design and Implementation of Covid-19 Directory on Vaccination System 3.5 Low2023-03-11
CVE-2023-1349 Hsycms Add Category Module cate.php cross site scripting — Hsycms 3.5 Low2023-03-11
CVE-2017-20182 Mobile Vikings Django AJAX Utilities Backslash pagination.js Pagination cross site scripting — Django AJAX Utilities 3.5 Low2023-03-10
CVE-2013-10020 MMDeveloper A Forms Plugin a-forms.php cross site scripting — A Forms Plugin 3.5 Low2023-03-10

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21546 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.