CVE Vulnerability

CWE-79

CVE-2019-15086

by

An issue was discovered in PRiSE adAS 1.7.0. The newentityID parameter is not properly escaped, leading to a reflected XSS in the error message.

CVE-2019-15095

by

DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter.

CVE-2019-15108

by

An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.

CVE-2019-15109

by

The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.

CVE-2019-15110

by

The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS.

CVE-2019-15112

by

The wp-slimstat plugin before 4.8.1 for WordPress has XSS.