CWE-79

CVE-2019-20486

February 26, 2023 by

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and adv_index.htm) within the web management console are vulnerable to stored XSS, as demonstrated by the configuration of the UI language.

CVE-2019-20493

February 26, 2023 by

cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520).

CVE-2019-20497

February 26, 2023 by

cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration (SEC-533).

CVE-2019-20511

February 26, 2023 by

ERPNext 11.1.47 allows blog?blog_category= Frame Injection.

CVE-2019-20512

February 26, 2023 by

Open edX Ironwood.1 allows support/certificates?course_id= reflected XSS.

CVE-2019-20513

February 26, 2023 by

Open edX Ironwood.1 allows support/certificates?user= reflected XSS.