CWE-79

CVE-2020-19709

February 26, 2023 by

Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.

CVE-2020-19762

February 26, 2023 by

Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for the first parameter in a GET request.

CVE-2020-19770

February 26, 2023 by

A cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin’s cookie.

CVE-2020-19825

February 26, 2023 by

Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain escalated privileges.

CVE-2020-19855

February 26, 2023 by

phpwcms v1.9 contains a cross-site scripting (XSS) vulnerability in /image_zoom.php.

CVE-2020-19587

February 26, 2023 by

Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.