Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21535

21535 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-44466 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-21
CVE-2022-44467 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-21
CVE-2022-44470 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-21
CVE-2022-44471 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-21
CVE-2022-44474 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-21
CVE-2021-4263 leanote history.js define cross site scripting — leanote 3.5 Low2022-12-21
CVE-2022-4617 Cross-site Scripting (XSS) - Reflected in microweber/microweber — microweber/microweber 6.1 -2022-12-21
CVE-2022-4632 Auto Upload Images cross site scripting — Auto Upload Images 3.5 Low2022-12-21
CVE-2022-4637 ep3-bs cross site scripting — ep3-bs 3.5 Low2022-12-21
CVE-2022-46771 IBM UrbanCode Deploy (UCD) cross-site scripting — UrbanCode Deploy (UCD) 4.6 Medium2022-12-20
CVE-2022-4619 Sidebar Widgets by CodeLights <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting — Sidebar Widgets by CodeLights 5.5 Medium2022-12-20
CVE-2022-39160 IBM Cognos Analytics cross-site scripting — Cognos Analytics 6.1 Medium2022-12-19
CVE-2022-40743 Apache Traffic Server: Security issues with the xdebug plugin — Apache Traffic Server 6.1 -2022-12-19
CVE-2022-42366 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-19
CVE-2022-42367 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-19
CVE-2022-44468 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-19
CVE-2022-44469 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-19
CVE-2022-44473 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-19
CVE-2022-35694 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-19
CVE-2022-35696 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-19
CVE-2022-42360 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-19
CVE-2022-44462 AEM Reflected XSS Arbitrary code execution — Experience Manager 5.4 Medium2022-12-19
CVE-2022-4609 Cross-site Scripting (XSS) - Stored in usememos/memos — usememos/memos 5.4 -2022-12-19
CVE-2022-4614 Cross-site Scripting (XSS) - Stored in alagrede/znote-app — alagrede/znote-app 5.4 -2022-12-19
CVE-2022-4615 Cross-site Scripting (XSS) - Reflected in openemr/openemr — openemr/openemr 6.1 -2022-12-19
CVE-2022-4605 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress — flatpressblog/flatpress 5.4 -2022-12-18
CVE-2022-4588 Boston Sleep slice Layout cross site scripting — slice 2.4 Low2022-12-17
CVE-2022-46670 Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack — MicroLogix 1100 & 1400 Controllers 7.1 High2022-12-16
CVE-2022-46870 Apache Zeppelin: Stored XSS in note permissions — Apache Zeppelin 5.4 -2022-12-16
CVE-2022-38106 Cross-Site Scripting Vulnerability in Serv-U Web Client — Serv-U File Server 5.4 Medium2022-12-16

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21535 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.