Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-79
Total 21765 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-7891 2 Adobe, Microsoft 2 Robohelp, Windows 2019-03-07 4.3 MEDIUM 6.1 MEDIUM
Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks.
CVE-2019-9606 1 Personal Video Collection Script Project 1 Personal Video Collection Script 2019-03-07 3.5 LOW 5.4 MEDIUM
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature.
CVE-2019-9595 1 Appcms 1 Appcms 2019-03-06 4.3 MEDIUM 6.1 MEDIUM
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.
CVE-2018-19554 1 Dotcms 1 Dotcms 2019-03-06 3.5 LOW 5.4 MEDIUM
An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/image_tool.jsp.
CVE-2019-6228 1 Apple 2 Iphone Os, Safari 2019-03-06 4.3 MEDIUM 6.1 MEDIUM
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack.
CVE-2019-9575 1 Quizandsurveymaster 1 Quiz And Survey Master 2019-03-06 4.3 MEDIUM 6.1 MEDIUM
The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.
CVE-2018-6882 1 Synacor 1 Zimbra Collaboration Suite 2019-03-05 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment.
CVE-2019-9570 1 Yzmcms 1 Yzmcms 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/system_manage/save.html URI, related to the site_code parameter.
CVE-2018-5670 1 Booking Calendar Project 1 Booking Calendar 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter.
CVE-2018-5666 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php bg_color parameter.
CVE-2018-5672 1 Booking Calendar Project 1 Booking Calendar 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php form_field5[label] parameter.
CVE-2018-5671 1 Booking Calendar Project 1 Booking Calendar 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extra_field1[items][field_item1][price_percent] parameter.
CVE-2018-5665 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_height parameter.
CVE-2018-5662 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title parameter.
CVE-2018-5663 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php button_text_link parameter.
CVE-2018-5664 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php social_icon_1 parameter.
CVE-2018-5660 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_sub_title parameter.
CVE-2018-5661 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_width parameter.
CVE-2018-5659 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2019-03-05 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_title parameter.
CVE-2018-5657 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2019-03-04 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title_icon parameter.