Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

DATE CVE VULNERABILITY TITLE RISK
2017-04-28 CVE-2017-2135 Cross-site Scripting vulnerability in Wp-Statistics WP Statistics
Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
wp-statistics CWE-79
6.1
2017-04-28 CVE-2017-2134 Cross-site Scripting vulnerability in Uchida Assetbase 8.0
Cross-site scripting vulnerability in ASSETBASE 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
uchida CWE-79
6.1
2017-04-28 CVE-2017-2127 Cross-site Scripting vulnerability in Yop-Poll YOP Poll
Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
yop-poll CWE-79
5.4
2017-04-28 CVE-2017-2124 Cross-site Scripting vulnerability in Onethird CMS
Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php.
network
low complexity
onethird CWE-79
6.1
2017-04-28 CVE-2017-2123 Cross-site Scripting vulnerability in Onethird CMS
Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.
network
low complexity
onethird CWE-79
6.1
2017-04-28 CVE-2017-2118 Cross-site Scripting vulnerability in Wbce CMS
Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
wbce CWE-79
6.1
2017-04-28 CVE-2017-2114 Cross-site Scripting vulnerability in Cybozu Office
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
cybozu CWE-79
5.4
2017-04-28 CVE-2017-2106 Cross-site Scripting vulnerability in Webmin
Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
webmin CWE-79
6.1
2017-04-28 CVE-2017-2092 Cross-site Scripting vulnerability in Cybozu Garoon
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
cybozu CWE-79
5.4
2017-04-28 CVE-2016-7841 Cross-site Scripting vulnerability in Olive Design Olive Diary DX
Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via the page parameter.
network
low complexity
olive-design CWE-79
6.1