Vulnerabilities (CVE)

Filtered by CWE-79
Total 37663 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0951 1 Showdoc 1 Showdoc 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.
CVE-2022-0946 1 Showdoc 1 Showdoc 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVE-2022-0945 1 Showdoc 1 Showdoc 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.
CVE-2022-0942 1 Showdoc 1 Showdoc 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVE-2022-0941 1 Showdoc 1 Showdoc 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVE-2022-0940 1 Showdoc 1 Showdoc 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVE-2022-0938 1 Showdoc 1 Showdoc 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVE-2022-0937 1 Showdoc 1 Showdoc 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVE-2022-0936 1 Autolabproject 1 Autolab 2024-11-21 3.5 LOW 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository autolab/autolab prior to 2.8.0.
CVE-2022-0930 1 Microweber 1 Microweber 2024-11-21 3.5 LOW 4.8 MEDIUM
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
CVE-2022-0929 1 Microweber 1 Microweber 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.
CVE-2022-0928 1 Microweber 1 Microweber 2024-11-21 3.5 LOW 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.
CVE-2022-0926 1 Microweber 1 Microweber 2024-11-21 3.5 LOW 4.8 MEDIUM
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
CVE-2022-0911 1 Pimcore 1 Pimcore 2024-11-21 3.5 LOW 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
CVE-2022-0906 1 Microweber 1 Microweber 2024-11-21 3.5 LOW 4.8 MEDIUM
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.
CVE-2022-0901 1 Ad Inserter Project 1 Ad Inserter 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters
CVE-2022-0900 1 Netdatasoft 1 Divvy Drive 2024-11-21 3.5 LOW 5.4 MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NetDataSoft DivvyDrive allows Stored XSS.This issue affects DivvyDrive: from unspecified before v.4.6.2.0.
CVE-2022-0899 1 Draftpress 1 Header Footer Code Manager 2024-11-21 N/A 6.1 MEDIUM
The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0898 1 Getigniteup 1 Igniteup 2024-11-21 3.5 LOW 5.4 MEDIUM
The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues
CVE-2022-0894 1 Pimcore 1 Pimcore 2024-11-21 3.5 LOW 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.