CVE Vulnerability

CWE-79

CVE-2021-36771

by

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS.

CVE-2021-36772

by

Zoho ManageEngine ADManager Plus before 7110 allows stored XSS.

CVE-2021-36573

by

File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.

CVE-2021-36601

by

GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: “siteURL” parameter.

CVE-2021-36603

by

Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field “Friendly Name 1”.

CVE-2021-36605

by

engineercms 1.03 is vulnerable to Cross Site Scripting (XSS). There is no escaping in the nickname field on the user list page. When viewing this page, the JavaScript code will be executed in the user’s browser.