CWE-79

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all the mediastatistics-header-* messages are output in HTML unescaped, leading to XSS.

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the “Fever” or “Blood Pressure” field on the patients/register-report.php.

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the “Clinic Name”, “Clinic Address”, “Clinic City”, or “Clinic Contact” field on clinics/register.php

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.

SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI.

Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the ‘EXEC_FROM’ parameter that can lead to data leakage.