https://owasp.org/www-community/attacks/xss/
Cross Site Scripting (XSS) | OWASP Foundation
Cross Site Scripting (XSS) on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.
cross site scriptingxssowaspfoundation
https://en.wikipedia.org/wiki/Cross-site_scripting
Cross-site scripting - Wikipedia
cross site scriptingwikipedia
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
Cross-Site Scripting (XSS) Cheat Sheet - 2026 Edition | Web Security Academy
Interactive cross-site scripting (XSS) cheat sheet for 2026, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors.
cross site scriptingcheat sheetweb securityxss
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-42tgsdMG?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Stored%20Cross-Site%20Scripting%20Vulnerabilities%26vs_k=1
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct...
identity services enginecross site scriptingciscostoredvulnerabilities
https://advisories.gitlab.com/maven/org.keycloak/keycloak-core/CVE-2024-4028/
Keycloak allows cross-site scripting (XSS) | GitLab Advisory Database (GLAD)
CVE-2024-4028 Keycloak allows cross-site scripting (XSS): A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious...
cross site scriptingkeycloakallowsxssgitlab
https://thehackernews.com/2012/01/cross-site-scripting-xss-vulnerability.html
Cross Site Scripting (XSS) Vulnerability in Google
Cross Site Scripting (XSS) Vulnerability in Google | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against...
cross site scriptingxssvulnerabilitygoogle
https://advisories.gitlab.com/composer/tecnickcom/tcpdf/CVE-2024-32489/
TCPDF Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2024-32489 TCPDF Cross-site Scripting vulnerability: TCPDF before 6.7.4 mishandles calls that use HTML syntax.
cross site scriptingtcpdfvulnerabilitygitlabadvisory
https://community.f5.com/tag/cross-site%20scripting?nodeId=board%3ATechnicalArticles
Tag:"cross-site scripting" in "Technical Articles" | DevCentral
Find all posts, articles, and events tagged with "cross-site scripting" within Technical Articles in DevCentral. Stay informed with the latest updates from our...
cross site scriptingtechnical articlestagdevcentral
https://advisories.gitlab.com/npm/generator-hottowel/CVE-2016-15025/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2016-15025 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A vulnerability, which was classified as problematic, was...
cross site scriptingweb page
https://advisories.gitlab.com/golang/github.com/usememos/memos/CVE-2022-4840/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-4840 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/composer/pimcore/pimcore/CVE-2023-2332/
Cross-site Scripting (XSS) in Conditions tab of Pricing Rules | GitLab Advisory Database (GLAD)
CVE-2023-2332 Cross-site Scripting (XSS) in Conditions tab of Pricing Rules: This vulnerability has the potential to steal a user's cookie and gain...
cross site scripting
https://advisories.gitlab.com/maven/org.igniterealtime.openfire/parent/CVE-2019-20366/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2019-20366 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): An XSS issue was discovered in Ignite Realtime Openfire...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.igniterealtime.openfire/parent/CVE-2019-20526/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2019-20526 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Ignite Realtime Openfire 4.4.1 allows XSS via the...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/email-ext/CVE-2023-25764/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-25764 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Jenkins Email Extension Plugin 2.93 and earlier does not...
cross site scriptingweb page
https://advisories.gitlab.com/golang/github.com/imgproxy/imgproxy/v3/CVE-2023-1496/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-1496 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Reflected in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/composer/thelia/thelia/GHSA-vq4j-qcx7-ppc6/
Thelia Cross-site Scripting vulnerability in BackOffice | GitLab Advisory Database (GLAD)
GHSA-vq4j-qcx7-ppc6 Thelia Cross-site Scripting vulnerability in BackOffice: The BackOffice of Thelia (error.html template) has a cross-site scripting...
cross site scriptingtheliavulnerability
https://advisories.gitlab.com/composer/pimcore/pimcore/CVE-2023-2730/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-2730 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/golang/github.com/arduino/arduino-create-agent/CVE-2023-49296/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-49296 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): The Arduino Create Agent allows users to use the Arduino...
cross site scriptingweb page
https://advisories.gitlab.com/golang/github.com/usememos/memos/CVE-2023-0108/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-0108 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/composer/librenms/librenms/CVE-2023-4982/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-4982 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Improper Neutralization of Input During Web Page Generation...
cross site scriptingweb page
https://www.ibm.com/support/pages/apar/PI93897
PI93897: PERSISTENT CROSS SITE SCRIPTING (XSS) ISSUE IN COGNOS 10.2.2
XSS error (see screenshot in testcase)
cross site scriptingpersistent
https://advisories.gitlab.com/composer/librenms/librenms/CVE-2022-36745/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-36745 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): LibreNMS v22.6.0 was discovered to contain a cross-site...
cross site scriptingweb page
https://advisories.gitlab.com/composer/magento/project-community-edition/CVE-2020-9581/
Magento stored cross-site scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2020-9581 Magento stored cross-site scripting vulnerability: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and...
cross site scriptingmagentostoredvulnerabilitygitlab
https://advisories.gitlab.com/composer/shopware/shopware/GHSA-9v82-vcjx-m76j/
Shopware: Reflective Cross Site-Scripting (XSS) in CMS components | GitLab Advisory Database (GLAD)
GHSA-9v82-vcjx-m76j Shopware: Reflective Cross Site-Scripting (XSS) in CMS components: When an application uses input fields, it is important that user input...
cross site scripting
https://advisories.gitlab.com/pypi/mezzanine/CVE-2020-19002/
Mezzanine Cross Site Scripting (XSS) vulnerability | GitLab Advisory Database (GLAD)
CVE-2020-19002 Mezzanine Cross Site Scripting (XSS) vulnerability: Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary...
cross site scriptingmezzaninexssvulnerabilitygitlab
https://advisories.gitlab.com/npm/dompurify/CVE-2025-15599/
DOMPurify contains a Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2025-15599 DOMPurify contains a Cross-site Scripting vulnerability: DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting...
cross site scriptingdompurifycontains
https://advisories.gitlab.com/npm/joplin/CVE-2023-37298/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-37298 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Joplin before 2.11.5 allows XSS via a USE element in an...
cross site scriptingweb page
https://advisories.gitlab.com/composer/typo3/cms/GHSA-2rcw-9hrm-8q7q/
TYPO3 Cross-Site Scripting in Frontend User Login | GitLab Advisory Database (GLAD)
GHSA-2rcw-9hrm-8q7q TYPO3 Cross-Site Scripting in Frontend User Login: Failing to properly encode user input, login status display is vulnerable to cross-site...
cross site scripting
https://advisories.gitlab.com/npm/pdf.js/CVE-2022-4670/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-4670 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): The PDF.js Viewer WordPress plugin before 2.1.8 does not...
cross site scriptingweb page
https://advisories.gitlab.com/composer/ameos/ameos_tarteaucitron/CVE-2022-33155/
Cross site scripting in ameos_tarteaucitron | GitLab Advisory Database (GLAD)
CVE-2022-33155 Cross site scripting in ameos_tarteaucitron: The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management /...
cross site scriptingameostarteaucitrongitlabadvisory
https://advisories.gitlab.com/composer/datatables/datatables/CVE-2021-36713/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2021-36713 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting (XSS) vulnerability in the DataTables...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.apache.tomcat/tomcat/CVE-2007-3384/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2007-3384 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Multiple cross-site scripting (XSS) vulnerabilities in...
cross site scriptingweb page
https://advisories.gitlab.com/composer/exceedone/exment/CVE-2022-38080/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-38080 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Reflected cross-site scripting vulnerability in Exment...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/deployer-framework/CVE-2020-2227/
Cross-site Scripting | GitLab Advisory Database (GLAD)
CVE-2020-2227 Cross-site Scripting: Jenkins Deployer Framework Plugin does not escape the URL displayed in the build home page, resulting in a stored...
cross site scriptinggitlabadvisorydatabaseglad
https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-platform-appwithinminutes-ui/CVE-2023-29515/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-29515 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): XWiki Platform is a generic wiki platform offering runtime...
cross site scriptingweb page
https://patchstack.com/database/wordpress/plugin/cartflows/vulnerability/wordpress-cartflows-plugin-2-0-1-cross-site-scripting-xss-vulnerability
Cross Site Scripting (XSS) in WordPress CartFlows Plugin - Patchstack
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
cross site scriptingxsswordpresscartflowsplugin
https://advisories.gitlab.com/maven/org.jenkins-ci.ruby-plugins/gitlab-hook/CVE-2020-2096/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2020-2096 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.apache.jspwiki/jspwiki-main/CVE-2022-28730/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-28730 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A carefully crafted request on AJAXPreview.jsp could...
cross site scriptingweb page
https://advisories.gitlab.com/composer/spipu/html2pdf/CVE-2023-39062/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-39062 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting vulnerability in Spipu HTML2PDF...
cross site scriptingweb page
https://advisories.gitlab.com/maven/com.ibeetl/beetl/CVE-2024-22491/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2024-22491 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A Stored Cross Site Scripting (XSS) vulnerability in...
cross site scriptingweb page
https://advisories.gitlab.com/golang/github.com/mattermost/mattermost-server/CVE-2023-1776/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-1776 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Boards in Mattermost allows an attacker to upload a...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.jenkins-ci.plugins.m2release/m2release/CVE-2019-10360/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2019-10360 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A stored cross site scripting vulnerability in Jenkins...
cross site scriptingweb page
https://advisories.gitlab.com/composer/thorsten/phpmyfaq/CVE-2023-5320/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-5320 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - DOM in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-platform-rendering-xwiki/CVE-2023-29205/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-29205 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Improper Neutralization of Input During Web Page...
cross site scriptingweb page
https://advisories.gitlab.com/cargo/vaultwarden/CVE-2024-55226/
Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability | GitLab Advisory...
CVE-2024-55226 Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability: Vaultwarden v1.32.5 was discovered to contain an authenticated...
cross site scriptingvaultwardenauthenticatedreflectedxss
https://advisories.gitlab.com/npm/@evershop/evershop/CVE-2023-46495/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-46495 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting vulnerability in EverShop NPM...
cross site scriptingweb page
https://advisories.gitlab.com/npm/lexical/CVE-2023-30792/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-30792 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Anchor tag hrefs in Lexical prior to v0.10.0 would render...
cross site scriptingweb page
https://advisories.gitlab.com/golang/github.com/songquanpeng/one-api/CVE-2025-3801/
one-api Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2025-3801 one-api Cross-site Scripting vulnerability: A vulnerability was found in songquanpeng one-api up to 0.6.10. It has been classified as...
cross site scriptingone apivulnerabilitygitlabadvisory
https://advisories.gitlab.com/npm/@intlify/core-base/CVE-2024-52809/
vue-i18n has cross-site scripting vulnerability with prototype pollution | GitLab Advisory Database...
CVE-2024-52809 vue-i18n has cross-site scripting vulnerability with prototype pollution: vue-i18n can be passed locale messages to createI18n or useI18n. we...
cross site scripting
https://advisories.gitlab.com/maven/org.bonitasoft.platform/platform-resources/CVE-2024-27609/
Bonita cross-site scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2024-27609 Bonita cross-site scripting vulnerability: Bonita before 10.1.0.W11 allows stored XSS via a UI screen in the administration panel.
cross site scriptingbonitavulnerabilitygitlabadvisory
https://patchstack.com/database/wordpress/plugin/astra-widgets/vulnerability/wordpress-astra-widgets-plugin-1-2-14-stored-cross-site-scripting-xss-vulnerability
Cross Site Scripting (XSS) in WordPress Astra Widgets Plugin - Patchstack
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
cross site scriptingxsswordpressastrawidgets
https://advisories.gitlab.com/pypi/inventree/GMS-2022-2344/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
GMS-2022-2344 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Improper Neutralization of Input During Web Page Generation...
cross site scriptingweb page
https://bughunters.google.com/reports/vrp/qZmd7EJHp/report
Reflected Cross-Site Scripting (XSS) on Google Acquisition Domain | Google Bug Hunters
Found a security vulnerability? Discover our forms for reporting security issues to Google: for the standard VRP, Google Play, and Play Data Abuse.
cross site scriptingon googlereflectedxss
https://advisories.gitlab.com/composer/silverstripe/framework/GHSA-468j-6jrc-2rjx/
silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and...
GHSA-468j-6jrc-2rjx silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField`: List of key / value pairs assigned to...
cross site scriptingsilverstripeframeworkvulnerable
https://advisories.gitlab.com/composer/processwire/processwire/CVE-2022-40487/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-40487 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): ProcessWire v3.0.200 was discovered to contain multiple...
cross site scriptingweb page
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-iox-xss-LpGkzwtJ.html
Cisco IOx Application Hosting Environment Stored Cross-Site Scripting Vulnerability - Cisco
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote...
cross site scriptingapplication hostingciscoioxenvironment
https://www.drupal.org/node/2459315
Crumbs - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-082 | Drupal.org
Jun 11, 2015 - Advisory ID: DRUPAL-SA-CONTRIB-2015-082 Project: Crumbs (third-party module) Version: 7.x Date: 2015-March-25 Security risk: 13/25 ( Moderately Critical)...
cross site scripting
https://advisories.gitlab.com/npm/jspreadsheet-ce/CVE-2022-48115/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-48115 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): The dropdown menu in jspreadsheet before v4.6.0 was...
cross site scriptingweb page
https://helpcenter.trendmicro.com/en-us/article/tmka-19550
Cross-site Scripting -9 attack | Trend Micro Help Center
Know what to do next when a Cross-site Scripting -9 attack appears in Trend Micro Home Network Security. Know what next steps to take.
cross site scriptingtrend microattackhelpcenter
https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-platform-administration-ui/CVE-2023-50722/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-50722 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): XWiki Platform is a generic wiki platform. Starting in 2.3...
cross site scriptingweb page
https://advisories.gitlab.com/composer/statamic/cms/CVE-2026-27196/
Statamic affected by privilege escalation via stored cross-site scripting | GitLab Advisory...
CVE-2026-27196 Statamic affected by privilege escalation via stored cross-site scripting: Stored XSS vulnerability in html fieldtypes allow authenticated users...
cross site scriptingprivilege escalation
https://advisories.gitlab.com/composer/yikesinc/yikes-inc-easy-mailchimp-extender/CVE-2021-4244/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2021-4244 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A vulnerability classified as problematic has been found in...
cross site scriptingweb page
https://advisories.gitlab.com/npm/koa/CVE-2025-32379/
Koajs vulnerable to Cross-Site Scripting (XSS) at ctx.redirect() function | GitLab Advisory...
cross site scripting
https://advisories.gitlab.com/maven/org.keycloak/keycloak-wildfly-server-subsystem/CVE-2022-4137/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-4137 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A reflected cross-site scripting (XSS) vulnerability was...
cross site scriptingweb page
https://advisories.gitlab.com/npm/braft-editor/CVE-2021-27524/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2021-27524 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting (XSS) vulnerability in margox...
cross site scriptingweb page
https://advisories.gitlab.com/composer/librenms/librenms/CVE-2026-2728/
LibreNMS affected by an authenticated Cross-site Scripting vulnerability on the showconfig page |...
CVE-2026-2728 LibreNMS affected by an authenticated Cross-site Scripting vulnerability on the showconfig page: LibreNMS versions before 26.3.0 are affected by...
cross site scripting
https://advisories.gitlab.com/maven/com.liferay.portal/release.dxp.bom/CVE-2024-25601/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2024-25601 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Stored cross-site scripting (XSS) vulnerability in Expando...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.apache.archiva/archiva-webapp/CVE-2023-28158/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-28158 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Privilege escalation via stored XSS using the file upload...
cross site scriptingweb page
https://advisories.gitlab.com/composer/pimcore/pimcore/CVE-2023-2342/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-2342 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Reflected in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-core-rendering-macro-rss/CVE-2023-29202/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-29202 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Improper Neutralization of Input During Web Page...
cross site scriptingweb page
https://advisories.gitlab.com/composer/magento/community-edition/CVE-2025-24412/
Magento Stored Cross-Site Scripting (XSS) Vulnerability | GitLab Advisory Database (GLAD)
CVE-2025-24412 Magento Stored Cross-Site Scripting (XSS) Vulnerability: Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and...
cross site scriptingmagentostored
https://advisories.gitlab.com/composer/pagekit/pagekit/CVE-2024-45967/
Pagekit Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2024-45967 Pagekit Cross-site Scripting vulnerability: Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.
cross site scriptingpagekitvulnerabilitygitlabadvisory
https://advisories.gitlab.com/composer/librenms/librenms/CVE-2024-47526/
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature | GitLab...
CVE-2024-47526 LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature: A Self Cross-Site Scripting (Self-XSS) vulnerability in the...
cross site scripting
https://patchstack.com/database/wordpress/plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-19-20-authenticated-contributor-stored-cross-site-scripting-via-shortcode-vulnerability-4
Cross Site Scripting (XSS) in WordPress Ultimate Addons for WPBakery Page Builder Plugin -...
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
cross site scripting
https://advisories.gitlab.com/composer/mediawiki/semantic-media-wiki/CVE-2022-48614/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-48614 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Special:Ask in Semantic MediaWiki before 4.0.2 allows...
cross site scriptingweb page
https://advisories.gitlab.com/npm/fuelux/GMS-2020-722/
Cross-Site Scripting in fuelux | GitLab Advisory Database (GLAD)
GMS-2020-722 Cross-Site Scripting in fuelux: Affected versions of fuelux contain a cross-site scripting vulnerability in the Pillbox feature. By supplying a...
cross site scriptinggitlabadvisorydatabaseglad
https://advisories.gitlab.com/maven/javagh.jenkins/mashup-portlets-plugin/CVE-2023-28679/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-28679 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides...
cross site scriptingweb page
https://advisories.gitlab.com/composer/khodakhah/nodcms/CVE-2020-20697/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2020-20697 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting vulnerability in khodakhah NodCMS...
cross site scriptingweb page
https://advisories.gitlab.com/composer/limesurvey/limesurvey/CVE-2019-16173/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2019-16173 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): LimeSurvey before v3.17.14 allows reflected XSS for...
cross site scriptingweb page
https://advisories.gitlab.com/nuget/umbracocms.core/CVE-2017-15279/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2017-15279 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site scripting (XSS) vulnerability in Umbraco CMS...
cross site scriptingweb page
https://advisories.gitlab.com/composer/baserproject/basercms/CVE-2021-20681/
Cross-site Scripting | GitLab Advisory Database (GLAD)
CVE-2021-20681 Cross-site Scripting: Improper neutralization of JavaScript input in the page editing function of baserCMS allows remote authenticated attackers...
cross site scriptinggitlabadvisorydatabaseglad
https://advisories.gitlab.com/golang/github.com/answerdev/answer/CVE-2023-0741/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-0741 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - DOM in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/composer/prestashop/prestashop/CVE-2024-21628/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2024-21628 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): PrestaShop is an open-source e-commerce platform. Prior to...
cross site scriptingweb page
https://advisories.gitlab.com/npm/ckeditor5-premium-features/CVE-2025-25299/
Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package | GitLab Advisory...
CVE-2025-25299 Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package: During a recent internal audit, we identified a Cross-Site...
cross site scripting
https://advisories.gitlab.com/golang/github.com/filebrowser/filebrowser/v2/CVE-2026-34530/
File Browser vulnerable to Stored Cross-site Scripting via text/template branding injection |...
CVE-2026-34530 File Browser vulnerable to Stored Cross-site Scripting via text/template branding injection: The SPA index page in File Browser is vulnerable to...
cross site scripting
https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/bart/CVE-2022-45387/
Jenkins BART Plugin vulnerable to cross-site scripting (XSS) | GitLab Advisory Database (GLAD)
CVE-2022-45387 Jenkins BART Plugin vulnerable to cross-site scripting (XSS): Jenkins BART Plugin 1.0.3 and earlier does not escape the parsed content of build...
cross site scripting
https://lostmon.blogspot.com/2005/05/quick-cart-search-field-cross-site.html
Quick Cart Search field cross site scripting and script insercion
cross site scriptingquick cartsearch field
https://advisories.gitlab.com/composer/francoisjacquet/rosariosis/CVE-2022-1997/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-1997 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/composer/typo3/cms/CVE-2022-31049/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-31049 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): TYPO3 is an open source web content management system....
cross site scriptingweb page
https://advisories.gitlab.com/maven/com.xuxueli/xxl-job/CVE-2023-26120/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-26120 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): This affects all versions of the package...
cross site scriptingweb page
https://advisories.gitlab.com/golang/github.com/grafana/grafana/CVE-2023-22462/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-22462 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Grafana is an open-source platform for monitoring and...
cross site scriptingweb page
https://advisories.gitlab.com/composer/pimcore/pimcore/CVE-2023-2343/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-2343 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - DOM in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/composer/librenms/librenms/CVE-2025-23200/
LibreNMS Misc Section Stored Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2025-23200 LibreNMS Misc Section Stored Cross-site Scripting vulnerability: StoredXSS-LibreNMS-MiscSection Description: Stored XSS on the parameter:...
cross site scripting
https://advisories.gitlab.com/maven/org.bonitasoft.console/bonita-web-server/CVE-2024-27609/
Bonita cross-site scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2024-27609 Bonita cross-site scripting vulnerability: Bonita before 10.1.0.W11 allows stored XSS via a UI screen in the administration panel.
cross site scriptingbonitavulnerabilitygitlabadvisory
https://advisories.gitlab.com/npm/nocodb/CVE-2022-2079/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-2079 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository...
cross site scriptingweb page
https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/build-with-parameters/CVE-2021-21628/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2021-21628 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Jenkins Build With Parameters Plugin 1.5 and earlier does...
cross site scriptingweb page
https://advisories.gitlab.com/npm/directus/CVE-2023-27474/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2023-27474 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Directus is a real-time API and App dashboard for managing...
cross site scriptingweb page
https://patchstack.com/database/wordpress/plugin/ultimate-addons-for-gutenberg/vulnerability/wordpress-spectra-plugin-2-19-14-authenticated-contributor-stored-cross-site-scripting-via-custom-css-vulnerability
Cross Site Scripting (XSS) in WordPress Spectra Plugin - Patchstack
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
cross site scriptingxsswordpressspectraplugin
https://www.drupal.org/sa-core-2019-004
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004 | Drupal.org
Aug 21, 2022 - Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability.
cross site scriptingdrupal coremoderatelycritical
https://advisories.gitlab.com/maven/org.keycloak/keycloak-core/CVE-2022-1438/
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab...
CVE-2022-1438 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A flaw was found in Keycloak. Under specific circumstances,...
cross site scriptingweb page