CVE Vulnerability

CWE-79

CVE-2022-0571

by

Cross-site Scripting (XSS) – Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2.

CVE-2022-0575

by

Cross-site Scripting (XSS) – Stored in Packagist librenms/librenms prior to 22.2.0.

CVE-2022-0576

by

Cross-site Scripting (XSS) – Generic in Packagist librenms/librenms prior to 22.1.0.

CVE-2022-0589

by

Cross-site Scripting (XSS) – Stored in Packagist librenms/librenms prior to 22.1.0.

CVE-2022-0590

by

The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVE-2022-0595

by

The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SVG files to be uploaded by default via the dnd_codedropz_upload AJAX action, which could lead to Stored Cross-Site Scripting issue