Vulnerabilities (CVE)

Filtered by CWE-80
Total 626 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-9500 1 Accellion 1 Ftp Server 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.
CVE-2016-9493 1 Jqueryform 1 Php Formmail Generator 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.lib.php file, upload file types are checked against a hard-coded list of dangerous extensions. This list does not include all variations of PHP files, which may lead to execution of the contained PHP code if the attacker can guess the uploaded filename. The form by default appends a short random string to the end of the filename.
CVE-2014-2353 1 Cogentdatahub 1 Cogent Datahub 2026-06-17 7.1 HIGH N/A
Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-10001 1 Pro2col 1 Stingray Fts 2026-06-16 4.3 MEDIUM 5.5 MEDIUM
A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remotely. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVE-2006-0149 1 Simpbook 1 Simpbook 2026-06-16 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field.
CVE-2003-5003 1 Ibm 1 Iss Blackice Pc Protection 2026-06-16 4.3 MEDIUM 5.0 MEDIUM
A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer