Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21535

21535 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-20843 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-20840 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-20839 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-20838 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-20836 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-20835 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-20834 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-20833 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-20832 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-20831 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 4.8 Medium2022-11-10
CVE-2022-42786 Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family — Com-Server LC 5.4 Medium2022-11-10
CVE-2022-43754 SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do — SUSE Linux Enterprise Module for SUSE Manager Server 4.2 2.6 Low2022-11-10
CVE-2022-39398 InfotelGLPI vulnerable to Cross-site Scripting — tasklists 8.8 High2022-11-10
CVE-2022-44590 WordPress Simple Video Embedder plugin <= 2.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability — Simple Video Embedder (WordPress plugin) 5.4 Medium2022-11-09
CVE-2022-32776 WordPress Advanced Ads – Ad Manager & AdSense plugin <= 1.31.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability — Advanced Ads – Ad Manager & AdSense 4.8 Medium2022-11-08
CVE-2022-41980 WordPress Mantenimiento web plugin <= 0.13 - Auth. Cross-Site Scripting (XSS) vulnerability — Mantenimiento web (WordPress plugin) 4.8 Medium2022-11-08
CVE-2022-30545 WordPress 5 Anker Connect plugin <= 1.2.6 - Reflected Cross-Site Scripting (XSS) vulnerability — 5 Anker Connect (WordPress plugin) 4.8 Medium2022-11-08
CVE-2022-33322 Mitsubishi Electric consumer electronics products 跨站脚本漏洞 — Air Conditioning MSZ-FD40/56/63/71/8022S 6.1 -2022-11-08
CVE-2022-41208 SAP Financial Consolidation 跨站脚本漏洞 — SAP Financial Consolidation 5.4 Medium2022-11-08
CVE-2022-41258 SAP Financial Consolidation 跨站脚本漏洞 — SAP Financial Consolidation 6.5 Medium2022-11-08
CVE-2022-41260 SAP Financial Consolidation 跨站脚本漏洞 — SAP Financial Consolidation 6.1 Medium2022-11-08
CVE-2022-3462 Highlight Focus <= 1.1 - Admin+ Stored Cross Site Scripting — Highlight Focus 4.8 -2022-11-07
CVE-2022-3873 Cross-site Scripting (XSS) - DOM in jgraph/drawio — jgraph/drawio 6.1 -2022-11-07
CVE-2022-43569 Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise — Splunk Enterprise 8.0 High2022-11-04
CVE-2022-43568 Reflected Cross-Site Scripting via the radio template in Splunk Enterprise — Splunk Enterprise 8.8 High2022-11-04
CVE-2022-27894 The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability. — Foundry Blobster Service 4.8 Medium2022-11-04
CVE-2022-43561 Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise — Splunk Enterprise 6.4 Medium2022-11-03
CVE-2022-44628 WordPress 4ECPS Web Forms plugin <= 0.2.17 - Auth. Stored Cross-Site Scripting (XSS) vulnerability — 4ECPS Web Forms (WordPress plugin) 5.9 Medium2022-11-03
CVE-2022-20969 Cisco Umbrella 跨站脚本漏洞 — Cisco Umbrella Dashboard 4.8 Medium2022-11-03
CVE-2022-36428 WordPress Rock Convert plugin <= 2.11.0 - Auth. Cross-Site Scripting (XSS) vulnerability — Rock Convert (WordPress plugin) 4.8 Medium2022-11-03

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21535 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.