Vulnerabilities (CVE)

Filtered by CWE-79
Total 47482 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-45814 1 Wp Calendar Project 1 Wp Calendar 2026-06-17 N/A 5.4 MEDIUM
Stored Cross-Site Scripting (XSS) vulnerability in Fabian von Allmen WP Calendar plugin <= 1.5.3 versions.
CVE-2022-45812 1 Exxp Project 1 Exxp 2026-06-17 N/A 6.5 MEDIUM
Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Lees Exxp plugin <= 2.6.8 versions.
CVE-2022-45769 1 Clicshopping 1 Clicshopping V3 2026-06-17 N/A 6.1 MEDIUM
A cross-site scripting (XSS) vulnerability in ClicShopping_V3 v3.402 allows attackers to execute arbitrary web scripts or HTML via a crafted URL parameter.
CVE-2022-45758 1 Sens Project 1 Sens 2026-06-17 N/A 5.4 MEDIUM
SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister.
CVE-2022-45756 1 Sens Project 1 Sens 2026-06-17 N/A 6.1 MEDIUM
SENS v1.0 is vulnerable to Cross Site Scripting (XSS).
CVE-2022-45755 1 Eyoucms 1 Eyoucms 2026-06-17 N/A 5.4 MEDIUM
Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page.
CVE-2022-45730 1 Phpgurukul 1 Doctor Appointment Management System 2026-06-17 N/A 6.1 MEDIUM
A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function.
CVE-2022-45729 1 Phpgurukul 1 Doctor Appointment Management System 2026-06-17 N/A 6.1 MEDIUM
A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter.
CVE-2022-45728 1 Phpgurukul 1 Doctor Appointment Management System 2026-06-17 N/A 6.1 MEDIUM
Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVE-2022-45722 1 Gzwhir 1 Ezeip 2026-06-17 N/A 6.1 MEDIUM
ezEIP v5.3.0(0649) was discovered to contain a cross-site scripting (XSS) vulnerability.
CVE-2022-45613 1 Book Store Management System Project 1 Book Store Management System 2026-06-17 N/A 5.4 MEDIUM
Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter.
CVE-2022-45598 1 Joplin Project 1 Joplin 2026-06-17 N/A 6.1 MEDIUM
Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization.
CVE-2022-45558 2 Apple, Left Project 2 Macos, Left 2026-06-17 N/A 6.1 MEDIUM
Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via the meta tag.
CVE-2022-45557 2 Apple, Left Project 2 Macos, Left 2026-06-17 N/A 6.1 MEDIUM
Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via file names.
CVE-2022-45543 1 Discuz 1 Discuzx 2026-06-17 N/A 6.1 MEDIUM
Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search.
CVE-2022-45542 1 Eyoucms 1 Eyoucms 2026-06-17 N/A 5.4 MEDIUM
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file.
CVE-2022-45541 1 Eyoucms 1 Eyoucms 2026-06-17 N/A 6.1 MEDIUM
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char.
CVE-2022-45540 1 Eyoucms 1 Eyoucms 2026-06-17 N/A 6.1 MEDIUM
EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char.
CVE-2022-45539 1 Eyoucms 1 Eyoucms 2026-06-17 N/A 6.1 MEDIUM
EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file.
CVE-2022-45538 1 Eyoucms 1 Eyoucms 2026-06-17 N/A 6.1 MEDIUM
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_GOBACK_URL".