Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
xss vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2007-0857
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin prior to 1.5.7 allow remote malicious users to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action.
Moinmoin Moinmoin 1.5.1
Moinmoin Moinmoin 1.5.2
Moinmoin Moinmoin 1.5.5a
Moinmoin Moinmoin
Moinmoin Moinmoin 1.5.3 Rc2
Moinmoin Moinmoin 1.5.4
Moinmoin Moinmoin 1.5.0
Moinmoin Moinmoin 1.5.5
Moinmoin Moinmoin 1.5.5 Rc1
Moinmoin Moinmoin 1.5.3
Moinmoin Moinmoin 1.5.3 Rc1
4.3
CVSSv2
CVE-2013-4433
Cross-site scripting (XSS) vulnerability in XHProf prior to 0.9.4 allows remote malicious users to inject arbitrary web script or HTML via the run parameter.
Php Xhprof
Php Xhprof 0.9.2
Php Xhprof 0.9.1
Php Xhprof 0.9.0
4.3
CVSSv2
CVE-2012-1825
Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 up to and including 6.3.4.10 allow remote malicious users to inject arbitrary web script or HTML via (1) the loginname parameter in a forgotpass a...
Forescout Counteract 6.3.4.10
Forescout Counteract 6.3.3.2
4.3
CVSSv2
CVE-2007-4048
Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and previous versions allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO.
Phpsysinfo Phpsysinfo
4.3
CVSSv2
CVE-2019-11559
A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote malicious users to inject arbitrary web script or HTML via the URL parameter to the Login component.
Hrworks Hrworks 1.16.1
4.3
CVSSv2
CVE-2005-4305
Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote malicious users to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page.
Edgewall Software Trac 0.9.2
Edgewall Software Trac 0.9
Edgewall Software Trac 0.9.1
6.8
CVSSv2
CVE-2014-9338
Multiple cross-site request forgery (CSRF) vulnerabilities in the O2Tweet plugin 0.0.4 and previous versions for WordPress allow remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) o2t_user...
O2tweet Project O2tweet
6.8
CVSSv2
CVE-2014-9339
Multiple cross-site request forgery (CSRF) vulnerabilities in the SPNbabble plugin 1.4.1 and previous versions for WordPress allow remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) userna...
Jayde Online Spnbabble 1.4.1
6.8
CVSSv2
CVE-2014-9340
Multiple cross-site request forgery (CSRF) vulnerabilities in the wpCommentTwit plugin 0.5 and previous versions for WordPress allow remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) user...
Wpcommenttwit Project Wpcommenttwit
6.8
CVSSv2
CVE-2014-9368
Cross-site request forgery (CSRF) vulnerability in the twitterDash plugin 2.1 and previous versions for WordPress allows remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the username_twitterDash...
Twitterdash Project Twitterdash
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
cross-site request forgery
unauthorized
CVE-2024-33925
reflected XSS
CVE-2023-51580
CVE-2023-51579
CVE-2015-2051
CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »