Advisories · Weakness
CWE-692.
Every Advisory and CVE whose sources give the weakness CWE-692, newest first.
- CVSS 5.4 Medium
Indico: Cross-Site-Scripting in link fields
- CWE-692
<3.3.13 · fixed in 3.3.13
GHSA-c4wc-ggrj-jg9v · CVE-2026-107396 - CVSS 6.1 Medium
league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes
- Cross-site scripting (XSS)
- CWE-86
>=1.5.0, <2.9.0 · fixed in 2.9.0
GHSA-29pj-957v-52mc · CVE-2026-71478 - CVSS 4.3 Medium
HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to attack since the server is not configured with…
- HCLSoftware Aftermarket EPC
- CWE-692
- CVSS 5.3 Medium
HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server.
- HCLSoftware Aftermarket EPC
- CWE-692
- CVSS 4.4 Medium
Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
- dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load
- CWE-692
- CVSS 6.1 Medium
Cisco IOS XE Software: A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an…
- Cisco IOS XE Software
- CWE-692
- CVSS 1.3 Low
The Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) Vulnerability
- the-scratch-channel.github.io
- Cross-site scripting (XSS)
- CWE-692
- CVSS 2.9 Low
CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability
- cryptpad
- CWE-692
- CVSS 6.5 Medium
UnoPim Stored XSS : Cookie hijacking through Create User function
- Cross-site scripting (XSS)
- CWE-616
<0.1.5 · fixed in 0.1.5
GHSA-cgr4-c233-h733 · CVE-2024-52305 - CVSS 4.6 Medium
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.
- CWE-692
- CVSS 6.5 Medium
teler-waf contains detection rule bypass via Entities payload
- Cross-site scripting (XSS)
- CWE-692
<0.2.0 · fixed in 0.2.0
GHSA-p2pf-g8cq-3gq5 · CVE-2023-26047