CVE Vulnerability

CWE-79

CVE-2022-0509

by

Cross-site Scripting (XSS) – Stored in Packagist pimcore/pimcore prior to 10.3.1.

CVE-2022-0510

by

Cross-site Scripting (XSS) – Reflected in Packagist pimcore/pimcore prior to 10.3.1.

CVE-2022-0375

by

Cross-site Scripting (XSS) – Stored in Packagist remdex/livehelperchat prior to 3.93v.

CVE-2022-0376

by

The User Meta WordPress plugin before 2.4.3 does not sanitise and escape the Form Name, as well as Shared Field Labels before outputting them in the admin dashboard when editing a form, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

CVE-2022-0378

by

Cross-site Scripting (XSS) – Reflected in Packagist microweber/microweber prior to 1.2.11.

CVE-2022-0379

by

Cross-site Scripting (XSS) – Stored in Packagist microweber/microweber prior to 1.2.11.