Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
xss vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2007-0857
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin prior to 1.5.7 allow remote malicious users to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action.
Moinmoin Moinmoin 1.5.1
Moinmoin Moinmoin 1.5.2
Moinmoin Moinmoin 1.5.5a
Moinmoin Moinmoin
Moinmoin Moinmoin 1.5.3 Rc2
Moinmoin Moinmoin 1.5.4
Moinmoin Moinmoin 1.5.0
Moinmoin Moinmoin 1.5.5
Moinmoin Moinmoin 1.5.5 Rc1
Moinmoin Moinmoin 1.5.3
Moinmoin Moinmoin 1.5.3 Rc1
312
VMScore
CVE-2015-0513
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) prior to 6.5u1 and ViPR SRM prior to 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafte...
Emc Watch4net
Emc Vipr Srm
383
VMScore
CVE-2007-3056
Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote malicious users to inject arbitrary web script or HTML via the path parameter.
Websvn Websvn
605
VMScore
CVE-2014-9339
Multiple cross-site request forgery (CSRF) vulnerabilities in the SPNbabble plugin 1.4.1 and previous versions for WordPress allow remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) userna...
Jayde Online Spnbabble 1.4.1
605
VMScore
CVE-2014-9392
Cross-site request forgery (CSRF) vulnerability in the PictoBrowser (pictobrowser-gallery) plugin 0.3.1 and previous versions for WordPress allows remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks vi...
Pictobrowser Project Pictobrowser
605
VMScore
CVE-2014-9396
Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleFlickr plugin 3.0.3 and previous versions for WordPress allow remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) sim...
Simpleflickr Project Simpleflickr
383
VMScore
CVE-2005-4305
Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote malicious users to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page.
Edgewall Software Trac 0.9.2
Edgewall Software Trac 0.9
Edgewall Software Trac 0.9.1
383
VMScore
CVE-2013-4433
Cross-site scripting (XSS) vulnerability in XHProf prior to 0.9.4 allows remote malicious users to inject arbitrary web script or HTML via the run parameter.
Php Xhprof
Php Xhprof 0.9.2
Php Xhprof 0.9.1
Php Xhprof 0.9.0
231
VMScore
CVE-2010-2788
Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki prior to 1.15.5, when wgEnableProfileInfo is enabled, allows remote malicious users to inject arbitrary web script or HTML via the filter parameter.
Mediawiki Mediawiki 1.11
Mediawiki Mediawiki 1.10.3
Mediawiki Mediawiki 1.10.0
Mediawiki Mediawiki 1.13.0
Mediawiki Mediawiki 1.11.2
Mediawiki Mediawiki 1.12.0
Mediawiki Mediawiki 1.15.0
Mediawiki Mediawiki 1.3.15
Mediawiki Mediawiki 1.3.14
Mediawiki Mediawiki 1.2.5
Mediawiki Mediawiki 1.2.4
Mediawiki Mediawiki 1.5
Mediawiki Mediawiki 1.4.1
Mediawiki Mediawiki 1.3.5
Mediawiki Mediawiki 1.3.6
Mediawiki Mediawiki 1.4.14
Mediawiki Mediawiki 1.4.13
Mediawiki Mediawiki 1.5.5
Mediawiki Mediawiki 1.5.6
Mediawiki Mediawiki 1.11.0
Mediawiki Mediawiki 1.4
Mediawiki Mediawiki 1.15.3
383
VMScore
CVE-2015-0577
Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA), allow remote malicious users to inject arbitrary web script or HTM...
Cisco Asyncos -
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
CVE-2006-4304
wireless
CVE-2023-23022
local file inclusion
CVE-2024-27058
CVE-2024-33820
open redirect
CVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »