CVE Vulnerability

CWE-79

CVE-2019-9168

by

WooCommerce before 3.5.5 allows XSS via a Photoswipe caption.

CVE-2019-9206

by

PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued.

CVE-2019-9207

by

PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued.

CVE-2019-9110

by

XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to coreframe/app/content/postinfo.php.

CVE-2019-9142

by

An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.

CVE-2019-9145

by

An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page.