CWE-79

CVE-2019-15889

February 26, 2023 by

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.

CVE-2019-15898

February 26, 2023 by

Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.

CVE-2019-15935

February 26, 2023 by

Intesync Solismed 3.3sp has XSS.

CVE-2019-15842

February 26, 2023 by

The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS.

JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user.

CVE-2019-15864

February 26, 2023 by

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.