Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-03-08 | CVE-2017-6534 | Cross-site Scripting vulnerability in Webpagetest Project Webpagetest 3.0 A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. | 6.1 |
2017-03-08 | CVE-2017-6533 | Cross-site Scripting vulnerability in Webpagetest Project Webpagetest 3.0 A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. | 6.1 |
2017-03-08 | CVE-2017-6518 | Cross-site Scripting vulnerability in Sanadata Sanacms 7.3 Cross-site scripting (XSS) vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter. | 6.1 |
2017-03-07 | CVE-2017-6511 | Cross-site Scripting vulnerability in Finecms Project Finecms andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php. | 6.1 |
2017-03-07 | CVE-2017-1133 | Cross-site Scripting vulnerability in IBM products IBM QRadar 7.2 is vulnerable to cross-site scripting. | 5.4 |
2017-03-07 | CVE-2016-9723 | Cross-site Scripting vulnerability in IBM products IBM QRadar 7.2 is vulnerable to cross-site scripting. | 6.1 |
2017-03-07 | CVE-2017-6509 | Cross-site Scripting vulnerability in Burgundy-Cms Project Burgundy-Cms 20170220 Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php (id parameter). | 6.1 |
2017-03-07 | CVE-2016-7140 | Cross-site Scripting vulnerability in Plone Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 6.1 |
2017-03-07 | CVE-2016-7139 | Cross-site Scripting vulnerability in Plone Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. | 6.1 |
2017-03-07 | CVE-2016-7138 | Cross-site Scripting vulnerability in Plone Cross-site scripting (XSS) vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. | 6.1 |