CWE-79

CVE-2021-40176

February 23, 2023 by

Zoho ManageEngine Log360 before Build 5225 allows stored XSS.

CVE-2021-40178

February 23, 2023 by

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.

CVE-2021-4018

February 23, 2023 by

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php.

CVE-2021-4020

February 23, 2023 by

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

CVE-2021-40214

February 23, 2023 by

Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component.