CWE-79

CVE-2022-45028

February 23, 2023 by godfreyd94

A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha.

CVE-2022-4503

February 23, 2023 by godfreyd94

Cross-site Scripting (XSS) – Generic in GitHub repository openemr/openemr prior to 7.0.0.2.

CVE-2022-45033

February 23, 2023 by godfreyd94

A cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field.

A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the No Results field.

CVE-2022-45037

February 23, 2023 by godfreyd94

A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name field.

CVE-2022-45038

February 23, 2023 by godfreyd94

A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Footer field.