CVE Vulnerability

CWE-79

CVE-2019-17489

by

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create.

CVE-2019-17491

by

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web/polygon/problem/update.

CVE-2019-17493

by

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or web/polygon/problem/update.

CVE-2019-17494

by

laravel-bjyblog 6.1.1 has XSS via a crafted URL.

CVE-2019-17496

by

Craft CMS before 3.3.8 has stored XSS via a name field. This field is mishandled during site deletion.

CVE-2019-17504

by

An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter.