CWE-79: Cross-site Scripting (XSS)

This vulnerability allows authorized users of Combodo iTop to inject malicious scripts into tooltips via the customization mechanism, creating a store...

This vulnerability allows attackers to inject malicious HTML into GitLab notes, leading to cross-site scripting (XSS) attacks. It affects GitLab Commu...

This stored cross-site scripting (XSS) vulnerability in GitLab allows attackers to inject malicious scripts into issue descriptions, comments, and oth...

CVE-2022-21690 is a cross-site scripting (XSS) vulnerability in OnionShare where the path parameter is not properly sanitized before being passed to t...

This vulnerability allows attackers to inject malicious scripts through emoji generation in GitLab, leading to cross-site scripting (XSS) attacks. It ...

This vulnerability allows attackers to execute arbitrary JavaScript code in victims' browsers by uploading malicious ipynb (Jupyter Notebook) files to...

CVE-2021-41134 is a stored cross-site scripting (XSS) vulnerability in nbdime, a tool for diffing and merging Jupyter Notebooks. Attackers can inject ...

This stored cross-site scripting vulnerability in InHand Networks IR615 Router's web interface allows attackers to inject malicious scripts that execu...

This is a stored cross-site scripting (XSS) vulnerability in GitLab Enterprise Edition's merge request creation page. Attackers can inject malicious J...

CVE-2021-41086 is a DOM-based cross-site scripting (XSS) vulnerability in jsuites JavaScript components. Attackers can inject malicious JavaScript by ...

This vulnerability allows attackers to inject malicious scripts into GitLab via Mermaid markdown diagrams, which execute when other users view the con...

CVE-2021-39136 is a cross-site scripting (XSS) vulnerability in baserCMS's file upload function within the management system. Attackers can inject mal...

This vulnerability allows attackers to execute stored cross-site scripting (XSS) attacks by creating a malicious default branch name in GitLab. All Gi...

CVE-2020-16946 is a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server that allows authenticated attackers to inject malicious sc...

CVE-2020-16944 is a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where improper input sanitization allows authenticated att...

This reflected XSS vulnerability in Zirve Information Technologies' e-Taxpayer Accounting Website allows attackers to inject malicious scripts into we...

This is a reflected cross-site scripting (XSS) vulnerability in Ankara Hosting Website Design Website Software that allows attackers to inject malicio...

3DAlloy MediaWiki extension versions 1.0 through 1.8 contain a cross-site scripting (XSS) vulnerability in the <3d> parser tag and {{#3d}} parser func...

This vulnerability allows authenticated users with page editing privileges to inject malicious scripts into the Citizen MediaWiki skin's search result...

This vulnerability allows any user to inject arbitrary HTML into web pages by editing page content when using the Citizen skin with ShortDescription e...

This vulnerability allows any user to inject arbitrary HTML into web pages via the TabberNeue MediaWiki extension, enabling cross-site scripting (XSS)...

This vulnerability allows attackers to inject malicious scripts into web pages generated by Drupal COOKiES Consent Management module, which could exec...

A stored XSS vulnerability in EmbedAI allows authenticated attackers to inject malicious JavaScript into chat messages. When other users view these me...

This is a cross-site scripting (XSS) vulnerability in the TabberNeue MediaWiki extension that allows attackers to inject malicious scripts via user-su...

A Cross-Site Scripting (XSS) vulnerability in i-librarian v5.11.0 and earlier allows a local attacker to execute arbitrary JavaScript code via the sea...

This vulnerability in the OMGF WordPress plugin allows unauthenticated attackers to modify plugin settings and inject stored XSS payloads due to missi...

A stored cross-site scripting (XSS) vulnerability in opensolution Quick CMS v6.7 allows attackers to inject malicious scripts into the 'Content - Name...

This DOM-based XSS vulnerability in Typora allows attackers to execute arbitrary JavaScript code by tricking users into opening malicious markdown fil...

CVE-2023-23630 is a cross-site scripting (XSS) vulnerability in the Eta JavaScript templating engine when used with Express API. Attackers can inject ...

This is a cross-site scripting (XSS) vulnerability in docsify documentation generators before version 4.12.0. Attackers can bypass previous security f...

A cross-site scripting (XSS) vulnerability in Blood Bank Management System 1.0 allows attackers to inject malicious JavaScript via the msg and error p...

A cross-site scripting (XSS) vulnerability in Blood Bank Management System 1.0 allows attackers to inject malicious JavaScript via user profile parame...

A cross-site scripting (XSS) vulnerability in the Blood Bank Management System's abs.php component allows attackers to inject malicious JavaScript via...

This cross-site scripting vulnerability in Blood Bank Management System 1.0 allows attackers to inject malicious JavaScript into user profile paramete...

This cross-site scripting (XSS) vulnerability in Blood Bank Management System 1.0 allows attackers to inject malicious JavaScript via the error parame...

This cross-site scripting (XSS) vulnerability in Logpoint allows attackers to inject malicious scripts into web pages viewed by other users. It affect...

This vulnerability allows attackers to inject malicious scripts into the user portal's browse brick in Combodo iTop, potentially compromising user ses...

This stored cross-site scripting (XSS) vulnerability in bunny.net WordPress plugin allows attackers to inject malicious scripts into web pages that ar...

This stored cross-site scripting (XSS) vulnerability in Archer Platform allows authenticated attackers to inject malicious scripts into the applicatio...

This vulnerability allows attackers to inject malicious scripts into PrestaShop websites through cross-site scripting (XSS) attacks. The flaw in the V...

A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET allows attackers to upload specially crafted files that inject malicious JavaScrip...

A stored Cross-Site Scripting (XSS) vulnerability in Bagisto eCommerce platform allows attackers to inject malicious JavaScript into CMS pages by bypa...

A stored XSS vulnerability in open-webui version 0.3.8 allows attackers to inject malicious scripts via the model description field. When executed, th...

This is a cross-site scripting (XSS) vulnerability in Progress Sitefinity CMS administrative backend that allows attackers to inject malicious scripts...

A stored Cross-Site Scripting (XSS) vulnerability in JATOS v3.9.3 allows attackers to inject malicious JavaScript into the UUID field of study propert...

This CVE describes a cross-site scripting (XSS) vulnerability in Payara Server's Admin Console modules that allows attackers to inject malicious scrip...

The Domino Catalog template has a stored XSS vulnerability that allows attackers with document editing permissions to inject malicious scripts. When u...

This CVE describes a reflected cross-site scripting (XSS) vulnerability in Splunk Enterprise's /app/search/table endpoint. Attackers can craft malicio...

A stored cross-site scripting vulnerability in Esri ArcGIS Enterprise Sites allows authenticated high-privileged attackers to inject malicious JavaScr...

A stored XSS vulnerability in Esri Portal for ArcGIS Sites allows authenticated high-privilege attackers to inject malicious JavaScript into site conf...