Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21532

21532 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-31097 Stored XSS in Grafana's Unified Alerting — grafana 7.3 High2022-07-15
CVE-2022-32225 Veeam Management Pack for Microsoft System Center 跨站脚本漏洞 — Veeam Management Pack for Microsoft System Center 6.1 -2022-07-14
CVE-2022-2396 SourceCodester Simple e-Learning System claire_blake cross site scripting — Simple e-Learning System 3.5 Low2022-07-14
CVE-2022-31102 Cross-site Scripting for Argo CD single sign on users — argo-cd 2.6 Low2022-07-12
CVE-2022-35224 SAP Enterprise Portal 跨站脚本漏洞 — SAP Enterprise Portal 6.1 -2022-07-12
CVE-2022-35225 SAP NetWeaver和SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal 6.1 -2022-07-12
CVE-2022-35227 SAP NetWeaver Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal (WPC) 6.1 -2022-07-12
CVE-2022-35172 SAP NetWeaver和SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal 6.1 -2022-07-12
CVE-2022-35170 SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal 6.1 -2022-07-12
CVE-2022-32247 SAP NetWeaver和SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal 6.1 -2022-07-12
CVE-2022-2364 SourceCodester Simple Parking Management System category cross site scripting — Simple Parking Management System 3.5 Low2022-07-12
CVE-2022-2363 SourceCodester Simple Parking Management System cross site scripting — Simple Parking Management System 3.5 Low2022-07-12
CVE-2022-2293 SourceCodester Simple Sales Management System create cross site scripting — Simple Sales Management System 3.5 Low2022-07-12
CVE-2022-2292 SourceCodester Hotel Management System Room Edit Page 1 cross site scripting — Hotel Management System 3.5 Low2022-07-12
CVE-2022-2291 SourceCodester Hotel Management System Search search cross site scripting — Hotel Management System 4.3 Medium2022-07-12
CVE-2022-22682 Synology Calendar 跨站脚本漏洞 — Synology Calendar 6.5 Medium2022-07-12
CVE-2022-2093 WP Duplicate Page < 1.3 - Admin+ Stored Cross Site Scripting — WP Duplicate Page 4.8 -2022-07-11
CVE-2022-2092 WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting — WooCommerce PDF Invoices & Packing Slips 6.1 -2022-07-11
CVE-2022-2089 Bold Page Builder < 4.3.3 - Admin+ Stored Cross-Site Scripting — Bold Page Builder 4.8 -2022-07-11
CVE-2022-2050 WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting — WP-Paginate 4.8 -2022-07-11
CVE-2022-1951 Core Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-Scripting — core plugin for kitestudio themes 6.1 -2022-07-11
CVE-2022-1938 Awin Data Feed < 1.8 - Unauthenticated Stored Cross-Site Scripting — Awin Data Feed 5.4 -2022-07-11
CVE-2022-1937 Awin Data Feed < 1.8 - Reflected Cross-Site Scripting — Awin Data Feed 6.1 -2022-07-11
CVE-2022-1910 Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting — Shortcodes and extra features for Phlox theme 6.1 -2022-07-11
CVE-2022-1894 Popup Builder < 4.1.11 - Admin+ Stored Cross-Site Scripting — Popup Builder – Create highly converting, mobile friendly marketing popups. 4.8 -2022-07-11
CVE-2022-1546 WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site Scripting — WooCommerce – Product Importer 6.1 -2022-07-11
CVE-2022-1474 WP Event Manager < 3.1.28 - Reflected Cross-Site Scripting — WP Event Manager – Easily Build your Calendar of Events! 6.1 -2022-07-11
CVE-2022-1220 FoxyShop < 4.8.2 - Reflected Cross-Site Scripting — FoxyShop 6.1 -2022-07-11
CVE-2022-2365 Cross-site Scripting (XSS) - Stored in zadam/trilium — zadam/trilium 5.4 -2022-07-10
CVE-2022-31029 Authenticated XSS in Pi-hole AdminLTE — AdminLTE 5.9 Medium2022-07-07

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21532 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.