Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVEs (47,050)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-29025 1Rockwellautomation 2Armorstart St 281e Firmware Armorstart St 284ee Firmware Jun 17, 2026 May 11, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify th...Show more A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page. Show less
CVE-2023-29024 1Rockwellautomation 2Armorstart St 281e Firmware Armorstart St 284ee Firmware Jun 17, 2026 May 11, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability was discovered that could potentially allow a malicious user to view and modify s...Show more A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability was discovered that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a phishing attack, is required for successful exploitation of this vulnerability. Show less
CVE-2023-29023 1Rockwellautomation 2Armorstart St 281e Firmware Armorstart St 284ee Firmware Jun 17, 2026 May 11, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User i...Show more A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a phishing attack, is required for successful exploitation of this vulnerability. Show less
CVE-2023-29022 1Rockwellautomation 2Armorstart St 281e Firmware Armorstart St 284ee Firmware Jun 17, 2026 May 11, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify th...Show more A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page. Show less
CVE-2023-25309 1Fetlife 1Rollout Ui Jul 9, 2026 May 11, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui version 0.5, allows attackers to execute arbitrary code via a crafted url to the delete a feature functionality.
CVE-2023-2660 1Oretnom23 1Online Computer And Laptop Store Jun 17, 2026 May 11, 2023 N/A· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file view_categories.php. The manipulation of the argument...Show more A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file view_categories.php. The manipulation of the argument c leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228802 is the identifier assigned to this vulnerability.Show less
CVE-2023-22720 1Wp Links Page Project 1Wp Links Page Jun 17, 2026 May 11, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robert Macchi WP Links Page plugin <= 4.9.3 versions.
CVE-2023-2657 1Oretnom23 1Online Computer And Laptop Store Jun 17, 2026 May 11, 2023 N/A· v4 6.1 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability classified as problematic was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. The manipulation of the arg...Show more A vulnerability classified as problematic was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228799.Show less
CVE-2023-30256 1Webkul 1Qloapps Jun 17, 2026 May 11, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file.
CVE-2023-2490 1Useragent Spy Project 1Useragent Spy Jun 17, 2026 May 11, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fernando Briano UserAgent-Spy plugin <= 1.3.1 versions.
CVE-2023-31165 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2023-31164 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2023-31163 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2023-31160 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2023-31159 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2023-31158 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2023-31157 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2023-31156 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2023-31155 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2023-31154 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a rem...Show more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Show less

Previous 1...123512361237...2353 Next