CWE-79

CVE-2020-19611

February 26, 2023 by

Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter.

CVE-2020-19616

February 26, 2023 by

Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing.

CVE-2020-19617

February 26, 2023 by

Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile.

CVE-2020-19618

February 26, 2023 by

Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing.

CVE-2020-19619

February 26, 2023 by

Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile.

CVE-2020-19626

February 26, 2023 by

Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new.