Robuta

https://owasp.org/www-community/attacks/xss/ Cross Site Scripting (XSS) | OWASP Foundation Cross Site Scripting (XSS) on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. cross site scriptingxssowaspfoundation https://en.wikipedia.org/wiki/Cross-site_scripting Cross-site scripting - Wikipedia cross site scriptingwikipedia https://portswigger.net/web-security/cross-site-scripting/cheat-sheet Cross-Site Scripting (XSS) Cheat Sheet - 2026 Edition | Web Security Academy Interactive cross-site scripting (XSS) cheat sheet for 2026, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors. cross site scriptingcheat sheetweb securityxss https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-42tgsdMG?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Stored%20Cross-Site%20Scripting%20Vulnerabilities%26vs_k=1 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct... identity services enginecross site scriptingciscostoredvulnerabilities https://advisories.gitlab.com/maven/org.keycloak/keycloak-core/CVE-2024-4028/ Keycloak allows cross-site scripting (XSS) | GitLab Advisory Database (GLAD) CVE-2024-4028 Keycloak allows cross-site scripting (XSS): A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious... cross site scriptingkeycloakallowsxssgitlab https://thehackernews.com/2012/01/cross-site-scripting-xss-vulnerability.html Cross Site Scripting (XSS) Vulnerability in Google Cross Site Scripting (XSS) Vulnerability in Google | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against... cross site scriptingxssvulnerabilitygoogle https://advisories.gitlab.com/composer/tecnickcom/tcpdf/CVE-2024-32489/ TCPDF Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2024-32489 TCPDF Cross-site Scripting vulnerability: TCPDF before 6.7.4 mishandles calls that use HTML syntax. cross site scriptingtcpdfvulnerabilitygitlabadvisory https://community.f5.com/tag/cross-site%20scripting?nodeId=board%3ATechnicalArticles Tag:"cross-site scripting" in "Technical Articles" | DevCentral Find all posts, articles, and events tagged with "cross-site scripting" within Technical Articles in DevCentral. Stay informed with the latest updates from our... cross site scriptingtechnical articlestagdevcentral https://advisories.gitlab.com/npm/generator-hottowel/CVE-2016-15025/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2016-15025 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A vulnerability, which was classified as problematic, was... cross site scriptingweb page https://advisories.gitlab.com/golang/github.com/usememos/memos/CVE-2022-4840/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-4840 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/composer/pimcore/pimcore/CVE-2023-2332/ Cross-site Scripting (XSS) in Conditions tab of Pricing Rules | GitLab Advisory Database (GLAD) CVE-2023-2332 Cross-site Scripting (XSS) in Conditions tab of Pricing Rules: This vulnerability has the potential to steal a user's cookie and gain... cross site scripting https://advisories.gitlab.com/maven/org.igniterealtime.openfire/parent/CVE-2019-20366/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2019-20366 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): An XSS issue was discovered in Ignite Realtime Openfire... cross site scriptingweb page https://advisories.gitlab.com/maven/org.igniterealtime.openfire/parent/CVE-2019-20526/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2019-20526 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Ignite Realtime Openfire 4.4.1 allows XSS via the... cross site scriptingweb page https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/email-ext/CVE-2023-25764/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-25764 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Jenkins Email Extension Plugin 2.93 and earlier does not... cross site scriptingweb page https://advisories.gitlab.com/golang/github.com/imgproxy/imgproxy/v3/CVE-2023-1496/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-1496 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Reflected in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/composer/thelia/thelia/GHSA-vq4j-qcx7-ppc6/ Thelia Cross-site Scripting vulnerability in BackOffice | GitLab Advisory Database (GLAD) GHSA-vq4j-qcx7-ppc6 Thelia Cross-site Scripting vulnerability in BackOffice: The BackOffice of Thelia (error.html template) has a cross-site scripting... cross site scriptingtheliavulnerability https://advisories.gitlab.com/composer/pimcore/pimcore/CVE-2023-2730/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-2730 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/golang/github.com/arduino/arduino-create-agent/CVE-2023-49296/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-49296 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): The Arduino Create Agent allows users to use the Arduino... cross site scriptingweb page https://advisories.gitlab.com/golang/github.com/usememos/memos/CVE-2023-0108/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-0108 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/composer/librenms/librenms/CVE-2023-4982/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-4982 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Improper Neutralization of Input During Web Page Generation... cross site scriptingweb page https://www.ibm.com/support/pages/apar/PI93897 PI93897: PERSISTENT CROSS SITE SCRIPTING (XSS) ISSUE IN COGNOS 10.2.2 XSS error (see screenshot in testcase) cross site scriptingpersistent https://advisories.gitlab.com/composer/librenms/librenms/CVE-2022-36745/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-36745 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): LibreNMS v22.6.0 was discovered to contain a cross-site... cross site scriptingweb page https://advisories.gitlab.com/composer/magento/project-community-edition/CVE-2020-9581/ Magento stored cross-site scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2020-9581 Magento stored cross-site scripting vulnerability: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and... cross site scriptingmagentostoredvulnerabilitygitlab https://advisories.gitlab.com/composer/shopware/shopware/GHSA-9v82-vcjx-m76j/ Shopware: Reflective Cross Site-Scripting (XSS) in CMS components | GitLab Advisory Database (GLAD) GHSA-9v82-vcjx-m76j Shopware: Reflective Cross Site-Scripting (XSS) in CMS components: When an application uses input fields, it is important that user input... cross site scripting https://advisories.gitlab.com/pypi/mezzanine/CVE-2020-19002/ Mezzanine Cross Site Scripting (XSS) vulnerability | GitLab Advisory Database (GLAD) CVE-2020-19002 Mezzanine Cross Site Scripting (XSS) vulnerability: Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary... cross site scriptingmezzaninexssvulnerabilitygitlab https://advisories.gitlab.com/npm/dompurify/CVE-2025-15599/ DOMPurify contains a Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2025-15599 DOMPurify contains a Cross-site Scripting vulnerability: DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting... cross site scriptingdompurifycontains https://advisories.gitlab.com/npm/joplin/CVE-2023-37298/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-37298 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Joplin before 2.11.5 allows XSS via a USE element in an... cross site scriptingweb page https://advisories.gitlab.com/composer/typo3/cms/GHSA-2rcw-9hrm-8q7q/ TYPO3 Cross-Site Scripting in Frontend User Login | GitLab Advisory Database (GLAD) GHSA-2rcw-9hrm-8q7q TYPO3 Cross-Site Scripting in Frontend User Login: Failing to properly encode user input, login status display is vulnerable to cross-site... cross site scripting https://advisories.gitlab.com/npm/pdf.js/CVE-2022-4670/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-4670 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): The PDF.js Viewer WordPress plugin before 2.1.8 does not... cross site scriptingweb page https://advisories.gitlab.com/composer/ameos/ameos_tarteaucitron/CVE-2022-33155/ Cross site scripting in ameos_tarteaucitron | GitLab Advisory Database (GLAD) CVE-2022-33155 Cross site scripting in ameos_tarteaucitron: The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management /... cross site scriptingameostarteaucitrongitlabadvisory https://advisories.gitlab.com/composer/datatables/datatables/CVE-2021-36713/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2021-36713 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting (XSS) vulnerability in the DataTables... cross site scriptingweb page https://advisories.gitlab.com/maven/org.apache.tomcat/tomcat/CVE-2007-3384/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2007-3384 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Multiple cross-site scripting (XSS) vulnerabilities in... cross site scriptingweb page https://advisories.gitlab.com/composer/exceedone/exment/CVE-2022-38080/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-38080 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Reflected cross-site scripting vulnerability in Exment... cross site scriptingweb page https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/deployer-framework/CVE-2020-2227/ Cross-site Scripting | GitLab Advisory Database (GLAD) CVE-2020-2227 Cross-site Scripting: Jenkins Deployer Framework Plugin does not escape the URL displayed in the build home page, resulting in a stored... cross site scriptinggitlabadvisorydatabaseglad https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-platform-appwithinminutes-ui/CVE-2023-29515/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-29515 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): XWiki Platform is a generic wiki platform offering runtime... cross site scriptingweb page https://patchstack.com/database/wordpress/plugin/cartflows/vulnerability/wordpress-cartflows-plugin-2-0-1-cross-site-scripting-xss-vulnerability Cross Site Scripting (XSS) in WordPress CartFlows Plugin - Patchstack Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues. cross site scriptingxsswordpresscartflowsplugin https://advisories.gitlab.com/maven/org.jenkins-ci.ruby-plugins/gitlab-hook/CVE-2020-2096/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2020-2096 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not... cross site scriptingweb page https://advisories.gitlab.com/maven/org.apache.jspwiki/jspwiki-main/CVE-2022-28730/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-28730 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A carefully crafted request on AJAXPreview.jsp could... cross site scriptingweb page https://advisories.gitlab.com/composer/spipu/html2pdf/CVE-2023-39062/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-39062 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting vulnerability in Spipu HTML2PDF... cross site scriptingweb page https://advisories.gitlab.com/maven/com.ibeetl/beetl/CVE-2024-22491/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2024-22491 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A Stored Cross Site Scripting (XSS) vulnerability in... cross site scriptingweb page https://advisories.gitlab.com/golang/github.com/mattermost/mattermost-server/CVE-2023-1776/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-1776 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Boards in Mattermost allows an attacker to upload a... cross site scriptingweb page https://advisories.gitlab.com/maven/org.jenkins-ci.plugins.m2release/m2release/CVE-2019-10360/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2019-10360 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A stored cross site scripting vulnerability in Jenkins... cross site scriptingweb page https://advisories.gitlab.com/composer/thorsten/phpmyfaq/CVE-2023-5320/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-5320 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - DOM in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-platform-rendering-xwiki/CVE-2023-29205/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-29205 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Improper Neutralization of Input During Web Page... cross site scriptingweb page https://advisories.gitlab.com/cargo/vaultwarden/CVE-2024-55226/ Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability | GitLab Advisory... CVE-2024-55226 Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability: Vaultwarden v1.32.5 was discovered to contain an authenticated... cross site scriptingvaultwardenauthenticatedreflectedxss https://advisories.gitlab.com/npm/@evershop/evershop/CVE-2023-46495/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-46495 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting vulnerability in EverShop NPM... cross site scriptingweb page https://advisories.gitlab.com/npm/lexical/CVE-2023-30792/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-30792 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Anchor tag hrefs in Lexical prior to v0.10.0 would render... cross site scriptingweb page https://advisories.gitlab.com/golang/github.com/songquanpeng/one-api/CVE-2025-3801/ one-api Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2025-3801 one-api Cross-site Scripting vulnerability: A vulnerability was found in songquanpeng one-api up to 0.6.10. It has been classified as... cross site scriptingone apivulnerabilitygitlabadvisory https://advisories.gitlab.com/npm/@intlify/core-base/CVE-2024-52809/ vue-i18n has cross-site scripting vulnerability with prototype pollution | GitLab Advisory Database... CVE-2024-52809 vue-i18n has cross-site scripting vulnerability with prototype pollution: vue-i18n can be passed locale messages to createI18n or useI18n. we... cross site scripting https://advisories.gitlab.com/maven/org.bonitasoft.platform/platform-resources/CVE-2024-27609/ Bonita cross-site scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2024-27609 Bonita cross-site scripting vulnerability: Bonita before 10.1.0.W11 allows stored XSS via a UI screen in the administration panel. cross site scriptingbonitavulnerabilitygitlabadvisory https://patchstack.com/database/wordpress/plugin/astra-widgets/vulnerability/wordpress-astra-widgets-plugin-1-2-14-stored-cross-site-scripting-xss-vulnerability Cross Site Scripting (XSS) in WordPress Astra Widgets Plugin - Patchstack Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues. cross site scriptingxsswordpressastrawidgets https://advisories.gitlab.com/pypi/inventree/GMS-2022-2344/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... GMS-2022-2344 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Improper Neutralization of Input During Web Page Generation... cross site scriptingweb page https://bughunters.google.com/reports/vrp/qZmd7EJHp/report Reflected Cross-Site Scripting (XSS) on Google Acquisition Domain | Google Bug Hunters Found a security vulnerability? Discover our forms for reporting security issues to Google: for the standard VRP, Google Play, and Play Data Abuse. cross site scriptingon googlereflectedxss https://advisories.gitlab.com/composer/silverstripe/framework/GHSA-468j-6jrc-2rjx/ silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and... GHSA-468j-6jrc-2rjx silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField`: List of key / value pairs assigned to... cross site scriptingsilverstripeframeworkvulnerable https://advisories.gitlab.com/composer/processwire/processwire/CVE-2022-40487/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-40487 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): ProcessWire v3.0.200 was discovered to contain multiple... cross site scriptingweb page https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-iox-xss-LpGkzwtJ.html Cisco IOx Application Hosting Environment Stored Cross-Site Scripting Vulnerability - Cisco A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote... cross site scriptingapplication hostingciscoioxenvironment https://www.drupal.org/node/2459315 Crumbs - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-082 | Drupal.org Jun 11, 2015 - Advisory ID: DRUPAL-SA-CONTRIB-2015-082 Project: Crumbs (third-party module) Version: 7.x Date: 2015-March-25 Security risk: 13/25 ( Moderately Critical)... cross site scripting https://advisories.gitlab.com/npm/jspreadsheet-ce/CVE-2022-48115/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-48115 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): The dropdown menu in jspreadsheet before v4.6.0 was... cross site scriptingweb page https://helpcenter.trendmicro.com/en-us/article/tmka-19550 Cross-site Scripting -9 attack | Trend Micro Help Center Know what to do next when a Cross-site Scripting -9 attack appears in Trend Micro Home Network Security. Know what next steps to take. cross site scriptingtrend microattackhelpcenter https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-platform-administration-ui/CVE-2023-50722/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-50722 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): XWiki Platform is a generic wiki platform. Starting in 2.3... cross site scriptingweb page https://advisories.gitlab.com/composer/statamic/cms/CVE-2026-27196/ Statamic affected by privilege escalation via stored cross-site scripting | GitLab Advisory... CVE-2026-27196 Statamic affected by privilege escalation via stored cross-site scripting: Stored XSS vulnerability in html fieldtypes allow authenticated users... cross site scriptingprivilege escalation https://advisories.gitlab.com/composer/yikesinc/yikes-inc-easy-mailchimp-extender/CVE-2021-4244/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2021-4244 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A vulnerability classified as problematic has been found in... cross site scriptingweb page https://advisories.gitlab.com/npm/koa/CVE-2025-32379/ Koajs vulnerable to Cross-Site Scripting (XSS) at ctx.redirect() function | GitLab Advisory... cross site scripting https://advisories.gitlab.com/maven/org.keycloak/keycloak-wildfly-server-subsystem/CVE-2022-4137/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-4137 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A reflected cross-site scripting (XSS) vulnerability was... cross site scriptingweb page https://advisories.gitlab.com/npm/braft-editor/CVE-2021-27524/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2021-27524 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting (XSS) vulnerability in margox... cross site scriptingweb page https://advisories.gitlab.com/composer/librenms/librenms/CVE-2026-2728/ LibreNMS affected by an authenticated Cross-site Scripting vulnerability on the showconfig page |... CVE-2026-2728 LibreNMS affected by an authenticated Cross-site Scripting vulnerability on the showconfig page: LibreNMS versions before 26.3.0 are affected by... cross site scripting https://advisories.gitlab.com/maven/com.liferay.portal/release.dxp.bom/CVE-2024-25601/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2024-25601 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Stored cross-site scripting (XSS) vulnerability in Expando... cross site scriptingweb page https://advisories.gitlab.com/maven/org.apache.archiva/archiva-webapp/CVE-2023-28158/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-28158 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Privilege escalation via stored XSS using the file upload... cross site scriptingweb page https://advisories.gitlab.com/composer/pimcore/pimcore/CVE-2023-2342/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-2342 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Reflected in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-core-rendering-macro-rss/CVE-2023-29202/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-29202 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Improper Neutralization of Input During Web Page... cross site scriptingweb page https://advisories.gitlab.com/composer/magento/community-edition/CVE-2025-24412/ Magento Stored Cross-Site Scripting (XSS) Vulnerability | GitLab Advisory Database (GLAD) CVE-2025-24412 Magento Stored Cross-Site Scripting (XSS) Vulnerability: Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and... cross site scriptingmagentostored https://advisories.gitlab.com/composer/pagekit/pagekit/CVE-2024-45967/ Pagekit Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2024-45967 Pagekit Cross-site Scripting vulnerability: Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget. cross site scriptingpagekitvulnerabilitygitlabadvisory https://advisories.gitlab.com/composer/librenms/librenms/CVE-2024-47526/ LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature | GitLab... CVE-2024-47526 LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature: A Self Cross-Site Scripting (Self-XSS) vulnerability in the... cross site scripting https://patchstack.com/database/wordpress/plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-19-20-authenticated-contributor-stored-cross-site-scripting-via-shortcode-vulnerability-4 Cross Site Scripting (XSS) in WordPress Ultimate Addons for WPBakery Page Builder Plugin -... Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues. cross site scripting https://advisories.gitlab.com/composer/mediawiki/semantic-media-wiki/CVE-2022-48614/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-48614 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Special:Ask in Semantic MediaWiki before 4.0.2 allows... cross site scriptingweb page https://advisories.gitlab.com/npm/fuelux/GMS-2020-722/ Cross-Site Scripting in fuelux | GitLab Advisory Database (GLAD) GMS-2020-722 Cross-Site Scripting in fuelux: Affected versions of fuelux contain a cross-site scripting vulnerability in the Pillbox feature. By supplying a... cross site scriptinggitlabadvisorydatabaseglad https://advisories.gitlab.com/maven/javagh.jenkins/mashup-portlets-plugin/CVE-2023-28679/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-28679 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides... cross site scriptingweb page https://advisories.gitlab.com/composer/khodakhah/nodcms/CVE-2020-20697/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2020-20697 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross Site Scripting vulnerability in khodakhah NodCMS... cross site scriptingweb page https://advisories.gitlab.com/composer/limesurvey/limesurvey/CVE-2019-16173/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2019-16173 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): LimeSurvey before v3.17.14 allows reflected XSS for... cross site scriptingweb page https://advisories.gitlab.com/nuget/umbracocms.core/CVE-2017-15279/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2017-15279 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site scripting (XSS) vulnerability in Umbraco CMS... cross site scriptingweb page https://advisories.gitlab.com/composer/baserproject/basercms/CVE-2021-20681/ Cross-site Scripting | GitLab Advisory Database (GLAD) CVE-2021-20681 Cross-site Scripting: Improper neutralization of JavaScript input in the page editing function of baserCMS allows remote authenticated attackers... cross site scriptinggitlabadvisorydatabaseglad https://advisories.gitlab.com/golang/github.com/answerdev/answer/CVE-2023-0741/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-0741 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - DOM in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/composer/prestashop/prestashop/CVE-2024-21628/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2024-21628 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): PrestaShop is an open-source e-commerce platform. Prior to... cross site scriptingweb page https://advisories.gitlab.com/npm/ckeditor5-premium-features/CVE-2025-25299/ Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package | GitLab Advisory... CVE-2025-25299 Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package: During a recent internal audit, we identified a Cross-Site... cross site scripting https://advisories.gitlab.com/golang/github.com/filebrowser/filebrowser/v2/CVE-2026-34530/ File Browser vulnerable to Stored Cross-site Scripting via text/template branding injection |... CVE-2026-34530 File Browser vulnerable to Stored Cross-site Scripting via text/template branding injection: The SPA index page in File Browser is vulnerable to... cross site scripting https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/bart/CVE-2022-45387/ Jenkins BART Plugin vulnerable to cross-site scripting (XSS) | GitLab Advisory Database (GLAD) CVE-2022-45387 Jenkins BART Plugin vulnerable to cross-site scripting (XSS): Jenkins BART Plugin 1.0.3 and earlier does not escape the parsed content of build... cross site scripting https://lostmon.blogspot.com/2005/05/quick-cart-search-field-cross-site.html Quick Cart Search field cross site scripting and script insercion cross site scriptingquick cartsearch field https://advisories.gitlab.com/composer/francoisjacquet/rosariosis/CVE-2022-1997/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-1997 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/composer/typo3/cms/CVE-2022-31049/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-31049 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): TYPO3 is an open source web content management system.... cross site scriptingweb page https://advisories.gitlab.com/maven/com.xuxueli/xxl-job/CVE-2023-26120/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-26120 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): This affects all versions of the package... cross site scriptingweb page https://advisories.gitlab.com/golang/github.com/grafana/grafana/CVE-2023-22462/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-22462 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Grafana is an open-source platform for monitoring and... cross site scriptingweb page https://advisories.gitlab.com/composer/pimcore/pimcore/CVE-2023-2343/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-2343 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - DOM in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/composer/librenms/librenms/CVE-2025-23200/ LibreNMS Misc Section Stored Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2025-23200 LibreNMS Misc Section Stored Cross-site Scripting vulnerability: StoredXSS-LibreNMS-MiscSection Description: Stored XSS on the parameter:... cross site scripting https://advisories.gitlab.com/maven/org.bonitasoft.console/bonita-web-server/CVE-2024-27609/ Bonita cross-site scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2024-27609 Bonita cross-site scripting vulnerability: Bonita before 10.1.0.W11 allows stored XSS via a UI screen in the administration panel. cross site scriptingbonitavulnerabilitygitlabadvisory https://advisories.gitlab.com/npm/nocodb/CVE-2022-2079/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-2079 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Cross-site Scripting (XSS) - Stored in GitHub repository... cross site scriptingweb page https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/build-with-parameters/CVE-2021-21628/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2021-21628 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Jenkins Build With Parameters Plugin 1.5 and earlier does... cross site scriptingweb page https://advisories.gitlab.com/npm/directus/CVE-2023-27474/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2023-27474 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): Directus is a real-time API and App dashboard for managing... cross site scriptingweb page https://patchstack.com/database/wordpress/plugin/ultimate-addons-for-gutenberg/vulnerability/wordpress-spectra-plugin-2-19-14-authenticated-contributor-stored-cross-site-scripting-via-custom-css-vulnerability Cross Site Scripting (XSS) in WordPress Spectra Plugin - Patchstack Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues. cross site scriptingxsswordpressspectraplugin https://www.drupal.org/sa-core-2019-004 Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004 | Drupal.org Aug 21, 2022 - Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability. cross site scriptingdrupal coremoderatelycritical https://advisories.gitlab.com/maven/org.keycloak/keycloak-core/CVE-2022-1438/ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitLab... CVE-2022-1438 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'): A flaw was found in Keycloak. Under specific circumstances,... cross site scriptingweb page