CVE Vulnerability

CWE-79

CVE-2021-27733

by

In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.

CVE-2021-27746

by

“HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability”

CVE-2021-27615

by

SAP Manufacturing Execution versions – 15.1, 1.5.2, 15.3, 15.4, does not contain some HTTP security headers in their HTTP response. The lack of these headers in response can be exploited by the attacker to execute Cross-Site Scripting (XSS) attacks.

CVE-2021-27658

by

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVE-2021-27659

by

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVE-2021-27558

by

A cross site scripting (XSS) issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute arbitrary web script via various areas such as data-link-creator.