CWE-79

CVE-2020-9338

February 26, 2023 by

SOPlanning 1.45 allows XSS via the “Your SoPlanning url” field.

CVE-2020-9339

February 26, 2023 by

SOPlanning 1.45 allows XSS via the Name or Comment to status.php.

A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted “protected” comment (with the cke_protected syntax).

CVE-2020-9288

February 26, 2023 by

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Profile.

CVE-2020-9092

February 26, 2023 by

HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module.

CVE-2020-9022

February 26, 2023 by

An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter allows XSS.