CWE-79

CVE-2018-1325

February 26, 2023 by

In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.

February 26, 2023 by

Entrust Datacard Syntera CS 5.x has XSS via the name field of “Domain or Computer Name” in the login page.

February 26, 2023 by

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter.

February 26, 2023 by

Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by “Josna Joseph”.

February 26, 2023 by

OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID)

February 26, 2023 by

ClipperCMS 1.3.3 has stored XSS via the “Tools -> Configuration” screen of the manager/ URI.