Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-80 (Web页面中脚本相关HTML标签转义处理不恰当(基本跨站脚本)) — Vulnerability Class 399

399 vulnerabilities classified as CWE-80 (Web页面中脚本相关HTML标签转义处理不恰当(基本跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2021-32718 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI — rabbitmq-server 3.1 Low2021-06-28
CVE-2021-29503 Improper Neutralization of Script-Related HTML Tags in Notes — hedgedoc 8.1 High2021-05-19
CVE-2019-25028 Stored cross-site scripting in Grid component in Vaadin 7 and 8 — Vaadin 5.4 Medium2021-04-23
CVE-2021-29467 Self-XSS — wrongthink 6.1 Medium2021-04-22
CVE-2021-1420 Cisco Webex Meetings HTML Injection Vulnerability — Cisco Webex Meetings 4.7 Medium2021-04-08
CVE-2019-18944 Micro Focus Solutions Business Manager 跨站脚本漏洞 — Solutions Business Manager 4.9 Medium2021-02-26
CVE-2021-1351 Cisco Webex Meetings Cross-Site Scripting Vulnerability — Cisco Webex Meetings 6.1 Medium2021-02-17
CVE-2020-13564 Sourceforge PhpGACL 跨站脚本漏洞 — phpGACL 6.1 -2021-02-01
CVE-2020-13563 Sourceforge PhpGACL 跨站脚本漏洞 — phpGACL 6.1 -2021-02-01
CVE-2020-13562 Sourceforge PhpGACL 跨站脚本漏洞 — phpGACL 6.1 -2021-02-01
CVE-2019-19285 Siemens XHQ 跨站脚本漏洞 — XHQ 5.4 -2020-12-14
CVE-2020-27126 Cisco Webex Meetings API Cross-Site Scripting Vulnerability — Cisco Webex Meetings 6.1 Medium2020-11-18
CVE-2020-26218 HTML Injection in touchbase.ai — touchbase.ai 8.0 High2020-11-11
CVE-2020-15788 Siemens Polarion Subversion Webclient 跨站脚本漏洞 — Polarion Subversion Webclient 6.1 -2020-09-09
CVE-2020-10043 Siemens SICAM MMU、SGU和T 跨站脚本漏洞 — SICAM MMU 6.1 -2020-07-14
CVE-2020-4047 Authenticated XSS via media attachment page in WordPress — wordpress-develop 6.8 Medium2020-06-12
CVE-2020-4049 Authenticated self-XSS via theme uploads in WordPress — wordpress-develop 2.4 Low2020-06-12
CVE-2020-4046 Authenticated XSS through embed block in WordPress — wordpress-develop 5.4 Medium2020-06-12
CVE-2020-11001 Possible XSS attack in Wagtail — wagtail 5.8 Medium2020-04-14
CVE-2020-7575 Siemens Climatix POL908和POL909 跨站脚本漏洞 — Climatix POL908 (BACnet/IP module) 6.1 -2020-04-14
CVE-2020-5283 XSS vulnerability in CVS show_subdir_lastmod support — viewvc 3.1 Low2020-04-03
CVE-2020-8966 Cross Site Scripting (XSS) flaws found in Tiki-Wiki CMS software — Tiki-Wiki CMS 6.5 Medium2020-04-01
CVE-2020-5267 Possible XSS vulnerability in ActionView — actionview 4.0 Medium2020-03-19
CVE-2019-6585 Siemens SCALANCE S-600 跨站脚本漏洞 — SCALANCE S602 6.1 -2020-03-10
CVE-2020-7579 Siemens Spectrum Power 跨站脚本漏洞 — Spectrum Power™ 5 6.1 -2020-03-10
CVE-2020-5241 XSS/Script injection vulnerability in matestack — matestack-ui-core 7.7 High2020-02-12
CVE-2019-13931 Siemens XHQ Operations Intelligence 跨站脚本漏洞 — XHQ 5.4 -2019-12-12
CVE-2019-13923 Siemens IE-WSN-PA Link WirelessHART Gateway 跨站脚本漏洞 — IE/WSN-PA Link WirelessHART Gateway 6.1 -2019-09-13
CVE-2019-5450 Nextcloud Android app 跨站脚本漏洞 — com.nextcloud.client 4.3 -2019-07-30
CVE-2019-1010018 Zammad 跨站脚本漏洞 — Zammad 6.1 -2019-07-16

Vulnerabilities classified as CWE-80 (Web页面中脚本相关HTML标签转义处理不恰当(基本跨站脚本)) represent 399 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.