CWE-79

CVE-2018-19913

February 26, 2023 by

DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.

February 26, 2023 by

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field.

February 26, 2023 by

DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.

February 26, 2023 by

Microweber 1.0.8 has reflected cross-site scripting (XSS) vulnerabilities.

February 26, 2023 by

CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view/cu_views URI.

February 26, 2023 by

Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element.