CVE Vulnerability

CWE-79

CVE-2019-8436

by

imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.

CVE-2019-8438

by

An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of “System setting->site setting” of admin/index.php, aka site_name.

CVE-2019-8439

by

An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of “System setting->site setting” of admin/index.php, aka site_domain.

CVE-2019-8440

by

An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third textbox (aka site logo) of “System setting->site setting” of admin/index.php, aka site_logo.

CVE-2019-8444

by

The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in image attribute specification.

CVE-2019-8361

by

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection.