Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21532

21532 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-2769 SourceCodester Company Website CMS contact cross site scripting — Company Website CMS 3.5 Low2022-08-11
CVE-2022-2768 SourceCodester Library Management System cross site scripting — Library Management System 3.5 Low2022-08-11
CVE-2022-2777 Cross-site Scripting (XSS) - Stored in microweber/microweber — microweber/microweber 4.8 -2022-08-11
CVE-2022-2767 SourceCodester Online Admission System index.php cross site scripting — Online Admission System 3.5 Low2022-08-11
CVE-2022-2748 SourceCodester Simple Online Book Store System edit.php cross site scripting — Simple Online Book Store System 3.5 Low2022-08-11
CVE-2022-33929 Dell Wyse Management Suite 跨站脚本漏洞 — Wyse Management Suite 6.1 Medium2022-08-10
CVE-2022-20869 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability — Cisco BroadWorks 6.1 Medium2022-08-10
CVE-2022-35697 AEM File Upload Security Issue leading to RXSS — Experience Manager 5.4 Medium2022-08-09
CVE-2022-2733 Cross-site Scripting (XSS) - Reflected in openemr/openemr — openemr/openemr 6.1 -2022-08-09
CVE-2022-2731 Cross-site Scripting (XSS) - Reflected in openemr/openemr — openemr/openemr 6.1 -2022-08-09
CVE-2022-2729 Cross-site Scripting (XSS) - DOM in openemr/openemr — openemr/openemr 5.4 -2022-08-09
CVE-2022-2725 SourceCodester Company Website CMS add-blog.php cross site scripting — Company Website CMS 3.5 Low2022-08-09
CVE-2022-2426 Thinkific Uploader <= 1.0.0 - Admin+ Stored Cross-Site Scripting — Thinkific Uploader 4.8 -2022-08-08
CVE-2022-2425 WP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site Scripting — WP DS Blog Map 4.8 -2022-08-08
CVE-2022-2424 Google Maps Anywhere <= 1.2.6.3 - Admin+ Stored Cross-Site Scripting — Google Maps Anywhere 4.8 -2022-08-08
CVE-2022-2423 DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site Scripting — DW Promobar 4.8 -2022-08-08
CVE-2022-2412 Better Tag Cloud <= 0.99.5 - Admin+ Stored Cross-Site Scripting — Better Tag Cloud 4.8 -2022-08-08
CVE-2022-2411 Auto More Tag <= 4.0.0 - Admin+ Stored Cross-Site Scripting — Auto More Tag 4.8 -2022-08-08
CVE-2022-2410 mTouch Quiz <= 3.1.3 - Admin+ Stored Cross Site Scripting — mTouch Quiz 4.8 -2022-08-08
CVE-2022-2409 Rough Chart <= 1.0.0 - Admin+ Stored Cross-Site Scripting — Rough Chart 4.8 -2022-08-08
CVE-2022-2398 WP Comments Fields < 4.1 - Admin+ Stored Cross-Site Scripting — WordPress Comments Fields 4.8 -2022-08-08
CVE-2022-2395 weForms < 1.6.14 - Admin+ Stored Cross-Site Scripting — weForms – Easy Drag & Drop Contact Form Builder For WordPress 4.8 -2022-08-08
CVE-2022-2391 Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting — Inspiro PRO 5.4 -2022-08-08
CVE-2022-2386 Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site Scripting — Crowdsignal Dashboard – Polls, Surveys & more 6.1 -2022-08-08
CVE-2022-2372 YaySMTP < 2.2.2 - Admin+ Stored Cross-Site Scripting — YaySMTP – Simple WP SMTP Mail 4.8 -2022-08-08
CVE-2022-2371 YaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site Scripting — YaySMTP – Simple WP SMTP Mail 5.4 -2022-08-08
CVE-2022-2701 SourceCodester Simple E-Learning System claire_blake cross site scripting — Simple E-Learning System 3.5 Low2022-08-08
CVE-2022-2692 SourceCodester Wedding Hall Booking System Staff User Profile cross site scripting — Wedding Hall Booking System 3.5 Low2022-08-06
CVE-2022-2691 SourceCodester Wedding Hall Booking System Profile Page cross site scripting — Wedding Hall Booking System 3.5 Low2022-08-06
CVE-2022-2690 SourceCodester Wedding Hall Booking System Booking Form cross site scripting — Wedding Hall Booking System 3.5 Low2022-08-06

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21532 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.