Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21506

21506 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2019-18942 Stored cross site scripting — Solutions Business Manager 5.5 Medium2021-02-26
CVE-2020-27224 Eclipse Theia 跨站脚本漏洞 — Eclipse Theia 8.8 -2021-02-24
CVE-2021-26544 Apache Livy (Incubating) is vulnerable to cross site scripting — Apache Livy (Incubating) 5.4 -2021-02-20
CVE-2020-2502 Cross-site Scripting Vulnerability in Photo Station — Photo Station 6.1 -2021-02-17
CVE-2020-29027 Reflected Cross Site Scripting — SiteManager 5.4 Medium2021-02-16
CVE-2020-29025 DOM-based Javascript injection — SiteManager Embedded (SM-E) 5.4 Medium2021-02-16
CVE-2021-21029 Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution — Magento Commerce 4.8 Medium2021-02-11
CVE-2021-21023 Magento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code Execution — Magento Commerce 4.8 -2021-02-11
CVE-2021-21030 Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution — Magento Commerce 6.1 -2021-02-11
CVE-2020-8031 obs: Stored XSS — Open Build Service 6.3 Medium2021-02-11
CVE-2021-23881 Stored Cross Site Scripting in ENS — Endpoint Security (ENS) for Windows 4.8 Medium2021-02-10
CVE-2021-20654 Wekan 跨站脚本漏洞 — Wekan 6.1 -2021-02-10
CVE-2021-21434 XSS in Survey Module — Survey 3.5 Low2021-02-08
CVE-2020-8294 Nextcloud 跨站脚本漏洞 — Nextcloud Server 5.4 -2021-02-03
CVE-2021-21043 Reflected Cross-site Scripting (XSS) on version-compare and page-compare tools — Experience Manager 6.1 Medium2021-02-02
CVE-2021-20186 Moodle 跨站脚本漏洞 — moodle 5.4 -2021-01-28
CVE-2021-20183 Moodle 跨站脚本漏洞 — moodle 6.1 -2021-01-28
CVE-2021-22875 Revive Adserver 跨站脚本漏洞 — https://github.com/revive-adserver/revive-adserver 6.1 -2021-01-28
CVE-2021-22874 Revive Adserver 跨站脚本漏洞 — https://github.com/revive-adserver/revive-adserver 6.1 -2021-01-28
CVE-2021-21283 XSS in Flarum Sticky extension. — sticky 5.4 Medium2021-01-26
CVE-2020-12512 Pepper+Fuchs Comtrol IO-Link Master Cross-Site Scripting — Comtrol IO-Link Master 7.5 High2021-01-22
CVE-2021-21260 XSS in description field — online-invoicing-system 7.6 High2021-01-22
CVE-2021-21259 Stored XSS in slide mode — hedgedoc 7.4 High2021-01-22
CVE-2021-22849 Hyweb HyCMS-J1 - Stored XSS — HyCMS-J1 4.6 Medium2021-01-22
CVE-2021-22871 Revive Adserver 跨站脚本漏洞 — https://github.com/revive-adserver/revive-adserver 4.8 -2021-01-21
CVE-2021-22872 Revive Adserver 跨站脚本漏洞 — https://github.com/revive-adserver/revive-adserver 6.1 -2021-01-21
CVE-2020-8292 Rocket.Chat 跨站脚本漏洞 — Rocket.Chat server 6.1 -2021-01-21
CVE-2020-8288 Rocket.Chat server 跨站脚本漏洞 — Rocket.Chat server 5.4 -2021-01-21
CVE-2021-1271 Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability — Cisco Web Security Appliance (WSA) 4.8 Medium2021-01-20
CVE-2020-27219 Eclipse hawkBit 跨站脚本漏洞 — Eclipse Hawkbit 7.2 -2021-01-14

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21506 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.