CVE Vulnerability

CWE-79

CVE-2020-29364

by

In NetArt News Lister 1.0.0, the news headlines vulnerable to stored xss attacks. Attackers can inject codes in news titles.

CVE-2020-29250

by

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php.

CVE-2020-29257

by

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.

CVE-2020-29258

by

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.

CVE-2020-29259

by

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.

CVE-2020-29303

by

A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arbitrary web script or HTML via a POST to /wp-admin/admin.php?page=drts/directories&q=%2F with _drts_form_build_id parameter containing the XSS payload and _t_ parameter set to an invalid or non-existent CSRF token.