CVE Vulnerability

CWE-79

CVE-2018-6844

by

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen.

CVE-2018-6795

by

PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field.

CVE-2018-6643

by

Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter.

CVE-2018-6655

by

PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field.

CVE-2018-6659

by

Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.

CVE-2018-6681

by

Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface.