CVE Vulnerability

CWE-79

CVE-2021-38151

by

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

CVE-2021-38152

by

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

CVE-2021-38087

by

Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009.

CVE-2021-37999

by

Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in a new browser tab via a crafted HTML page.

CVE-2021-37916

by

Joplin before 2.0.9 allows XSS via button and form in the note body.

CVE-2021-37936

by

It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be rendered for the user.