CVE Vulnerability

CWE-79

CVE-2019-9841

by

Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.

CVE-2019-9844

by

simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI.

CVE-2019-9725

by

The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting.

CVE-2019-9736

by

DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the ‘<EMBED SRC="data:image/svg+xml' substring.

CVE-2019-9737

by

Editor.md 1.5.0 has DOM-based XSS via vectors involving the ‘<EMBED SRC="data:image/svg+xml' substring.

CVE-2019-9738

by

jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the ‘<EMBED SRC="data:image/svg+xml' substring.