CWE-79

CVE-2020-15597

February 26, 2023 by

SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field.

CVE-2020-15599

February 26, 2023 by

Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field.

CVE-2020-15516

February 26, 2023 by

The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF.

CVE-2020-15517

February 26, 2023 by

The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS.

CVE-2020-15521

February 26, 2023 by

Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) .

CVE-2020-15535

February 26, 2023 by

An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields.