Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

DATE CVE VULNERABILITY TITLE RISK
2019-02-13 CVE-2019-8335 Cross-site Scripting vulnerability in Schoolcms 2.3.1
An issue was discovered in SchoolCMS 2.3.1.
network
low complexity
schoolcms CWE-79
6.1
2019-02-13 CVE-2019-8334 Cross-site Scripting vulnerability in Schoolcms 2.3.1
An issue was discovered in SchoolCMS 2.3.1.
network
low complexity
schoolcms CWE-79
6.1
2019-02-12 CVE-2019-7744 Cross-site Scripting vulnerability in Joomla Joomla!
An issue was discovered in Joomla! before 3.9.3.
network
low complexity
joomla CWE-79
6.1
2019-02-12 CVE-2019-7742 Cross-site Scripting vulnerability in Joomla Joomla!
An issue was discovered in Joomla! before 3.9.3.
network
low complexity
joomla CWE-79
6.1
2019-02-12 CVE-2019-7741 Cross-site Scripting vulnerability in Joomla Joomla!
An issue was discovered in Joomla! before 3.9.3.
network
low complexity
joomla CWE-79
6.1
2019-02-12 CVE-2019-7740 Cross-site Scripting vulnerability in Joomla Joomla!
An issue was discovered in Joomla! before 3.9.3.
network
low complexity
joomla CWE-79
6.1
2019-02-12 CVE-2019-7753 Cross-site Scripting vulnerability in Verydows 2.0
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.
network
low complexity
verydows CWE-79
6.1
2019-02-12 CVE-2019-3923 Cross-site Scripting vulnerability in Tenable Nessus
Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input.
network
low complexity
tenable CWE-79
5.4
2019-02-11 CVE-2019-7748 Cross-site Scripting vulnerability in Dbninja 3.2.7
_includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin/tasks.php exists.
network
low complexity
dbninja CWE-79
6.1
2019-02-11 CVE-2018-20242 Cross-site Scripting vulnerability in Apache Jspwiki
A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.
network
low complexity
apache CWE-79
6.1