Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
stored xss vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2014-2512
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom 7.4.3, 7.4.4 before P19, and 7.4.4 SP1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Emc Documentum Eroom 7.4.4
Emc Documentum Eroom 7.4.3
4.8
CVSSv3
CVE-2021-34789
A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote malicious user to perform a stored cross-site scripting (XSS) attack on an affected system. This vulnerability exists because the web-based management interface does not ...
Cisco Tetration
5.4
CVSSv3
CVE-2019-1882
A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote malicious user to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could explo...
Cisco Industrial Network Director 1.5\\(0.250\\)
5.4
CVSSv3
CVE-2017-12269
A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote malicious user to perform a stored cross-site scripting (XSS) attack. The vulnerability is due to insufficient input validation by the web UI of the affected software. An attacker...
Cisco Spark -
NA
CVE-2014-4871
Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote malicious users to inject arbitrary web script or HTML via the wlWpaPsk parameter.
Netcommwireless Nb604n Firmware
Netcommwireless Nb604n -
5.4
CVSSv3
CVE-2017-6769
A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Informa...
Cisco Secure Access Control System 5.8\\(0.8\\)
Cisco Secure Access Control System 5.8\\(1.5\\)
8.8
CVSSv3
CVE-2023-3320
The WP Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing nonce validation in the ~/admin/views/admin.php file. This makes it possible for unauthenticated malicious users to modify the plu...
Wp Sticky Social Project Wp Sticky Social
1 EDB exploit
6.1
CVSSv3
CVE-2018-15406
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is...
Cisco Ucs Director 6.6
4.8
CVSSv3
CVE-2018-15426
A vulnerability in the web-based interface of Cisco Unity Connection could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is due to insuffici...
Cisco Unity Connection Vmo-11.5\\(1\\)
4.8
CVSSv3
CVE-2020-3464
A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based...
Cisco Ucs Director
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23316
SQL injection
type confusion
CVE-2024-20697
CVE-2024-4344
local
CVE-2024-30043
CVE-2024-3821
CVE-2024-5041
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »