CWE-79

CVE-2020-19897

February 26, 2023 by

A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTML via the imgurl parameter.

CVE-2020-19914

February 26, 2023 by

Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function.

CVE-2020-19915

February 26, 2023 by

Cross Site Scripting (XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php.

CVE-2020-19924

February 26, 2023 by

In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks.

CVE-2020-19949

February 26, 2023 by

A cross-site scripting (XSS) vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML.

CVE-2020-19704

February 26, 2023 by

A stored cross-site scripting (XSS) vulnerability via ResourceController.java in spring-boot-admin as of 20190710 allows attackers to execute arbitrary web scripts or HTML.