← Back
CWE-79

47,859 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (47,859)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-37470
1Nchsoftware
1Webdictate
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.
CVE-2021-37467
1Nchsoftware
1Quorum
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).
CVE-2021-37466
1Nchsoftware
1Quorum
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).
CVE-2021-37465
1Nchsoftware
1Quorum
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).
CVE-2021-37464
1Nchsoftware
1Quorum
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).
CVE-2021-37463
1Nchsoftware
1Quorum
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).
CVE-2021-37462
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
CVE-2021-37461
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
CVE-2021-37460
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
CVE-2021-37459
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
CVE-2021-37458
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
CVE-2021-37457
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
CVE-2021-37456
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
CVE-2021-37455
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).
CVE-2021-37454
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
CVE-2021-37453
1Nchsoftware
1Axon Pbx
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).
CVE-2021-37451
1Nchsoftware
1Ivm Attendant
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected).
CVE-2021-37450
1Nchsoftware
1Ivm Attendant
Jun 17, 2026
Jul 25, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).
CVE-2021-25791
1Online Doctor Appointment System Php Full Source Code Project
1Online Doctor Appointment System Php Full Source Code
Jun 17, 2026
Jul 23, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloa...Show more
Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields.Show less
CVE-2021-25790
1House Rental And Property Listing Php Project
1House Rental And Property Listing Php
Jun 17, 2026
Jul 23, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in...Show more
Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in all text fields except for Phone Number and Alternate Phone Number.Show less