CVE Vulnerability

CWE-79

CVE-2020-28034

by

WordPress before 5.5.2 allows XSS associated with global variables.

CVE-2020-28038

by

WordPress before 5.5.2 allows stored XSS via post slugs.

CVE-2020-27980

by

Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users.

CVE-2020-27982

by

IceWarp 11.4.5.0 allows XSS via the language parameter.

CVE-2020-27988

by

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field).

CVE-2020-27989

by

Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard).