CWE-79

CVE-2018-10810

February 26, 2023 by

chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.

CVE-2018-10817

February 26, 2023 by

Severalnines ClusterControl before 1.6.0-4699 allows XSS.

Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel.

CVE-2018-10727

February 26, 2023 by

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header.

CVE-2018-10752

February 26, 2023 by

The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action.

CVE-2018-10763

February 26, 2023 by

Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Branding configuration page.