CWE-79

CVE-2019-14297

February 26, 2023 by

Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx.

CVE-2019-14298

February 26, 2023 by

Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard or editDashboard in CommonDataHandlerReadOnly.ashx.

A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.

CVE-2019-14272

February 26, 2023 by

In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS.

CVE-2019-14221

February 26, 2023 by

1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.

CVE-2019-14227

February 26, 2023 by

OX App Suite 7.10.1 and 7.10.2 allows XSS.