CWE-79

CVE-2021-31862

February 23, 2023 by

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication.

February 23, 2023 by

In JetBrains YouTrack before 2021.1.9819, a pull request’s title was sanitized insufficiently, leading to XSS.

February 23, 2023 by

In JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page.

February 23, 2023 by

XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field

February 23, 2023 by

Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header.

February 23, 2023 by

cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile (SEC-581).