CWE-79

CVE-2019-15479

February 26, 2023 by

Status Board 1.1.81 has reflected XSS via dashboard.ts.

CVE-2019-15480

February 26, 2023 by

Domoticz 4.10717 has XSS via item.Name.

CVE-2019-15481

February 26, 2023 by

Kimai v2 before 1.1 has XSS via a timesheet description.

CVE-2019-15314

February 26, 2023 by

tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-download_file.php?display&fileId= URI.

CVE-2019-15317

February 26, 2023 by

The give plugin before 2.4.7 for WordPress has XSS via a donor name.

CVE-2019-15327

February 26, 2023 by

The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.