Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

DATE CVE VULNERABILITY TITLE RISK
2017-03-08 CVE-2017-6534 Cross-site Scripting vulnerability in Webpagetest Project Webpagetest 3.0
A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0.
network
low complexity
webpagetest-project CWE-79
6.1
2017-03-08 CVE-2017-6533 Cross-site Scripting vulnerability in Webpagetest Project Webpagetest 3.0
A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0.
network
low complexity
webpagetest-project CWE-79
6.1
2017-03-08 CVE-2017-6518 Cross-site Scripting vulnerability in Sanadata Sanacms 7.3
Cross-site scripting (XSS) vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter.
network
low complexity
sanadata CWE-79
6.1
2017-03-07 CVE-2017-6511 Cross-site Scripting vulnerability in Finecms Project Finecms
andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.
network
low complexity
finecms-project CWE-79
6.1
2017-03-07 CVE-2017-1133 Cross-site Scripting vulnerability in IBM products
IBM QRadar 7.2 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2017-03-07 CVE-2016-9723 Cross-site Scripting vulnerability in IBM products
IBM QRadar 7.2 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1
2017-03-07 CVE-2017-6509 Cross-site Scripting vulnerability in Burgundy-Cms Project Burgundy-Cms 20170220
Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php (id parameter).
network
low complexity
burgundy-cms-project CWE-79
6.1
2017-03-07 CVE-2016-7140 Cross-site Scripting vulnerability in Plone
Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
plone CWE-79
6.1
2017-03-07 CVE-2016-7139 Cross-site Scripting vulnerability in Plone
Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
network
low complexity
plone CWE-79
6.1
2017-03-07 CVE-2016-7138 Cross-site Scripting vulnerability in Plone
Cross-site scripting (XSS) vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
network
low complexity
plone CWE-79
6.1