Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-06-26 | CVE-2018-0605 | Cross-site Scripting vulnerability in Pixelpost 1.7.15/1.7.3 Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2018-06-26 | CVE-2018-0603 | Cross-site Scripting vulnerability in Geminilabs Site Reviews Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2018-06-26 | CVE-2018-0602 | Cross-site Scripting vulnerability in Email Subscribers & Newsletters Project Email Subscribers & Newsletters Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2018-06-26 | CVE-2018-0574 | Cross-site Scripting vulnerability in Basercms Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2018-06-26 | CVE-2018-0570 | Cross-site Scripting vulnerability in Basercms Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. | 3.5 |
| 2018-06-26 | CVE-2018-0565 | Cross-site Scripting vulnerability in Cybozu Office Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2018-06-26 | CVE-2018-0559 | Cross-site Scripting vulnerability in Cybozu Mailwise Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors. | 4.3 |
| 2018-06-26 | CVE-2018-0558 | Cross-site Scripting vulnerability in Cybozu Mailwise Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors. | 4.3 |
| 2018-06-26 | CVE-2018-0557 | Cross-site Scripting vulnerability in Cybozu Mailwise Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors. | 4.3 |
| 2018-06-26 | CVE-2018-0527 | Cross-site Scripting vulnerability in Cybozu Office Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |