# CWE-707.

Every Advisory and CVE whose sources give the weakness CWE-707, newest first.

## Records, newest first (an older page)

- [Opencaching Deutschland oc-server3 Cachelist cachelists.tpl cross site scripting](https://agentprime.io/advisories/CVE-2022-4586.md)
  `CVE-2022-4586` · CVE record: Opencaching Deutschland oc-server3 · CVSS 3.5 Low · Not analysed yet · Published 17 Dec 2022 · Tags: CWE-707
- [Opencaching Deutschland oc-server3 Cookie start.tpl cross site scripting](https://agentprime.io/advisories/CVE-2022-4585.md)
  `CVE-2022-4585` · CVE record: Opencaching Deutschland oc-server3 · CVSS 3.5 Low · Not analysed yet · Published 17 Dec 2022 · Tags: CWE-707
- [starter-public-edition-4 cross site scripting](https://agentprime.io/advisories/CVE-2022-4582.md)
  `CVE-2022-4582` · CVE record: unspecified starter-public-edition-4 · CVSS 3.5 Low · Not analysed yet · Published 17 Dec 2022 · Tags: CWE-707
- [1j01 mind-map app.coffee cross site scripting](https://agentprime.io/advisories/CVE-2022-4581.md)
  `CVE-2022-4581` · CVE record: 1j01 mind-map · CVSS 3.5 Low · Not analysed yet · Published 17 Dec 2022 · Tags: CWE-707
- [roxlukas LMeve Login Page sql injection](https://agentprime.io/advisories/CVE-2021-4246.md)
  `CVE-2021-4246` · CVE record: roxlukas LMeve · CVSS 6.3 Medium · Not analysed yet · Published 17 Dec 2022 · Tags: CWE-707
- [y_project RuoYi GenController sql injection](https://agentprime.io/advisories/CVE-2022-4566.md)
  `CVE-2022-4566` · CVE record: y_project RuoYi · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-707
- [SemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scripting](https://agentprime.io/advisories/CVE-2022-4561.md)
  `CVE-2022-4561` · CVE record: unspecified SemanticDrilldown Extension · CVSS 3.5 Low · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-707
- [INEX IPX-Manager list.foil.php cross site scripting](https://agentprime.io/advisories/CVE-2022-4559.md)
  `CVE-2022-4559` · CVE record: INEX IPX-Manager · CVSS 3.5 Low · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-707
- [Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting](https://agentprime.io/advisories/CVE-2022-4558.md)
  `CVE-2022-4558` · CVE record: Alinto SOGo · CVSS 3.5 Low · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-707
- [Alinto SOGo Identity SOGoUserDefaults.m \_migrateMailIdentities cross site scripting](https://agentprime.io/advisories/CVE-2022-4556.md)
  `CVE-2022-4556` · CVE record: Alinto SOGo · CVSS 3.5 Low · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-707
- [WSO2 carbon-registry Cross-site Scripting vulnerability](https://agentprime.io/advisories/GHSA-j34r-57xj-pfm5.md)
  `GHSA-j34r-57xj-pfm5`, `CVE-2022-4520` · Maven `org.wso2.carbon.registry:carbon-registry`: affected `<4.8.12`, fixed in `4.8.12` · CVSS 3.5 Low · Not analysed yet · Published 15 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_det...](https://agentprime.io/advisories/GHSA-287q-jfcp-9vhv.md)
  `GHSA-287q-jfcp-9vhv`, `CVE-2022-4526`, `PYSEC-2022-43061` · PyPI `django-photologue`: affected `<3.16`, fixed in `3.16` · CVSS 3.5 Low · Not analysed yet · Published 15 Dec 2022 · Tags: CWE-707
- [vexim2 cross site scripting](https://agentprime.io/advisories/CVE-2022-4523.md)
  `CVE-2022-4523` · CVE record: unspecified vexim2 · CVSS 3.5 Low · Not analysed yet · Published 15 Dec 2022 · Tags: CWE-707
- [CalendarXP cross site scripting](https://agentprime.io/advisories/CVE-2022-4522.md)
  `CVE-2022-4522` · CVE record: unspecified CalendarXP · CVSS 3.5 Low · Not analysed yet · Published 15 Dec 2022 · Tags: CWE-707
- [Opencaching Deutschland oc-server3 varset.inc.php cross site scripting](https://agentprime.io/advisories/CVE-2022-4514.md)
  `CVE-2022-4514` · CVE record: Opencaching Deutschland oc-server3 · CVSS 3.5 Low · Not analysed yet · Published 15 Dec 2022 · Tags: CWE-707
- [European Environment Agency eionet.contreg cross site scripting](https://agentprime.io/advisories/CVE-2022-4513.md)
  `CVE-2022-4513` · CVE record: European Environment Agency eionet.contreg · CVSS 3.5 Low · Not analysed yet · Published 15 Dec 2022 · Tags: CWE-707
- [falling-fruit cross site scripting](https://agentprime.io/advisories/CVE-2022-4456.md)
  `CVE-2022-4456` · CVE record: unspecified falling-fruit · CVSS 3.5 Low · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-707
- [m0ver bible-online Search search.java query sql injection](https://agentprime.io/advisories/CVE-2022-4454.md)
  `CVE-2022-4454` · CVE record: m0ver bible-online · CVSS 5.5 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-707
- [ipti br.tag cross site scripting](https://agentprime.io/advisories/CVE-2022-4444.md)
  `CVE-2022-4444` · CVE record: ipti br.tag · CVSS 3.5 Low · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-707
- [yikes-inc-easy-mailchimp-extender Cross-site Scripting vulnerability](https://agentprime.io/advisories/GHSA-837v-6vgx-jqcc.md)
  `GHSA-837v-6vgx-jqcc`, `CVE-2021-4244`, `PKSA-fn69-14v1-d694` · Packagist `yikesinc/yikes-inc-easy-mailchimp-extender`: affected `<6.8.6`, fixed in `6.8.6` · CVSS 2.6 Low · Not analysed yet · Published 12 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [rAthena FluxCP Service Desk Image URL view.php cross site scripting](https://agentprime.io/advisories/CVE-2022-4421.md)
  `CVE-2022-4421` · CVE record: rAthena FluxCP · CVSS 3.5 Low · Not analysed yet · Published 12 Dec 2022 · Tags: CWE-707
- [RainyGao DocSys getReposAllUsers.do getReposAllUsers sql injection](https://agentprime.io/advisories/CVE-2022-4416.md)
  `CVE-2022-4416` · CVE record: RainyGao DocSys · CVSS 6.3 Medium · Not analysed yet · Published 12 Dec 2022 · Tags: CWE-707
- [SourceCodester Canteen Management System ajax_represent.php sql injection](https://agentprime.io/advisories/CVE-2022-4403.md)
  `CVE-2022-4403` · CVE record: SourceCodester Canteen Management System · CVSS 6.3 Medium · Not analysed yet · Published 11 Dec 2022 · Tags: CWE-707
- [pallidlight online-course-selection-system cross site scripting](https://agentprime.io/advisories/CVE-2022-4401.md)
  `CVE-2022-4401` · CVE record: pallidlight online-course-selection-system · CVSS 3.5 Low · Not analysed yet · Published 11 Dec 2022 · Tags: CWE-707
- [zbl1996 FS-Blog Title cross site scripting](https://agentprime.io/advisories/CVE-2022-4400.md)
  `CVE-2022-4400` · CVE record: zbl1996 FS-Blog · CVSS 3.5 Low · Not analysed yet · Published 11 Dec 2022 · Tags: CWE-707
- [pyRdfa3 Cross-site Scripting vulnerability](https://agentprime.io/advisories/GHSA-894q-wpg5-mf2h.md)
  `GHSA-894q-wpg5-mf2h`, `CVE-2022-4396`, `PYSEC-2026-910` · PyPI `pyrdfa3`: affected `<3.6.2`, fixed in `3.6.2` · CVSS 3.5 Low · Not analysed yet · Published 10 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [TicklishHoneyBee nodau db.c sql injection](https://agentprime.io/advisories/CVE-2022-4399.md)
  `CVE-2022-4399` · CVE record: TicklishHoneyBee nodau · CVSS 5.5 Medium · Not analysed yet · Published 10 Dec 2022 · Tags: CWE-707
- [Mingsoft MCMS vulnerable to SQL Injection](https://agentprime.io/advisories/GHSA-hc5g-xf64-j49j.md)
  `GHSA-hc5g-xf64-j49j`, `CVE-2022-4375` · Maven `net.mingsoft:ms-mcms`: affected `<5.2.10`, fixed in `5.2.10` · CVSS 6.3 Medium · Not analysed yet · Published 9 Dec 2022 · Tags: SQL injection, CWE-707
- [S-CMS Contact Information Page cross site scripting](https://agentprime.io/advisories/CVE-2022-4377.md)
  `CVE-2022-4377` · CVE record: unspecified S-CMS · CVSS 3.5 Low · Not analysed yet · Published 9 Dec 2022 · Tags: CWE-707
- [Mingsoft MCMS vulnerable to Cross-site Scripting](https://agentprime.io/advisories/GHSA-p46c-m4j7-mjvq.md)
  `GHSA-p46c-m4j7-mjvq`, `CVE-2022-4350` · Maven `net.mingsoft:ms-mcms`: affected `<=5.2.8`, no fixed version yet · CVSS 3.5 Low · Not analysed yet · Published 8 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [RuoYi-Cloud Cross-site Scripting vulnerability](https://agentprime.io/advisories/GHSA-vp22-232w-h9x8.md)
  `GHSA-vp22-232w-h9x8`, `CVE-2022-4348` · Maven `com.ruoyi:ruoyi-common`: affected `<=4.6.2`, no fixed version yet · CVSS 3.5 Low · Not analysed yet · Published 8 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [LinZhaoguan pb-cms Message Board comment cross site scripting](https://agentprime.io/advisories/CVE-2022-4354.md)
  `CVE-2022-4354` · CVE record: LinZhaoguan pb-cms · CVSS 4.3 Medium · Not analysed yet · Published 8 Dec 2022 · Tags: CWE-707
- [LinZhaoguan pb-cms IpUtil.getIpAddr cross site scripting](https://agentprime.io/advisories/CVE-2022-4353.md)
  `CVE-2022-4353` · CVE record: LinZhaoguan pb-cms · CVSS 3.5 Low · Not analysed yet · Published 8 Dec 2022 · Tags: CWE-707
- [xiandafu beetl-bbs WebUtils.java cross site scripting](https://agentprime.io/advisories/CVE-2022-4347.md)
  `CVE-2022-4347` · CVE record: xiandafu beetl-bbs · CVSS 3.5 Low · Not analysed yet · Published 8 Dec 2022 · Tags: CWE-707
- [annyshow DuxCMS Article edit cross site scripting](https://agentprime.io/advisories/CVE-2020-36609.md)
  `CVE-2020-36609` · CVE record: annyshow DuxCMS · CVSS 2.4 Low · Not analysed yet · Published 8 Dec 2022 · Tags: CWE-707
- [csliuwy coder-chain_gdut cross site scripting](https://agentprime.io/advisories/CVE-2022-4341.md)
  `CVE-2022-4341` · CVE record: csliuwy coder-chain_gdut · CVSS 3.5 Low · Not analysed yet · Published 7 Dec 2022 · Tags: CWE-707
- [maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection](https://agentprime.io/advisories/CVE-2022-4322.md)
  `CVE-2022-4322` · CVE record: unspecified maku-boot · CVSS 6.3 Medium · Not analysed yet · Published 7 Dec 2022 · Tags: CWE-707
- [FastCMS Template edit injection](https://agentprime.io/advisories/CVE-2022-4300.md)
  `CVE-2022-4300` · CVE record: unspecified FastCMS · CVSS 6.3 Medium · Not analysed yet · Published 6 Dec 2022 · Tags: CWE-707
- [SpringBootCMS Template Management injection](https://agentprime.io/advisories/CVE-2022-4282.md)
  `CVE-2022-4282` · CVE record: unspecified SpringBootCMS · CVSS 4.7 Medium · Not analysed yet · Published 5 Dec 2022 · Tags: CWE-707
- [SourceCodester Human Resource Management System employeeview.php cross site scripting](https://agentprime.io/advisories/CVE-2022-4279.md)
  `CVE-2022-4279` · CVE record: SourceCodester Human Resource Management System · CVSS 3.5 Low · Not analysed yet · Published 3 Dec 2022 · Tags: CWE-707
- [SourceCodester Human Resource Management System employeeadd.php sql injection](https://agentprime.io/advisories/CVE-2022-4278.md)
  `CVE-2022-4278` · CVE record: SourceCodester Human Resource Management System · CVSS 4.7 Medium · Not analysed yet · Published 3 Dec 2022 · Tags: CWE-707
- [Shaoxing Background Management System Bd sql injection](https://agentprime.io/advisories/CVE-2022-4277.md)
  `CVE-2022-4277` · CVE record: Shaoxing Background Management System · CVSS 6.3 Medium · Not analysed yet · Published 3 Dec 2022 · Tags: CWE-707
- [House Rental System POST Request search-property.php sql injection](https://agentprime.io/advisories/CVE-2022-4275.md)
  `CVE-2022-4275` · CVE record: unspecified House Rental System · CVSS 6.3 Medium · Not analysed yet · Published 3 Dec 2022 · Tags: CWE-707
- [House Rental System view-property.php sql injection](https://agentprime.io/advisories/CVE-2022-4274.md)
  `CVE-2022-4274` · CVE record: unspecified House Rental System · CVSS 6.3 Medium · Not analysed yet · Published 3 Dec 2022 · Tags: CWE-707
- [C-DATA Web Management System GET Parameter jumpto.php argument injection](https://agentprime.io/advisories/CVE-2022-4257.md)
  `CVE-2022-4257` · CVE record: C-DATA Web Management System · CVSS 6.3 Medium · EPSS 0.44 · Not analysed yet · Published 1 Dec 2022 · Tags: CWE-707
- [SourceCodester Canteen Management System customer.php builtin_echo cross site scripting](https://agentprime.io/advisories/CVE-2022-4253.md)
  `CVE-2022-4253` · CVE record: SourceCodester Canteen Management System · CVSS 3.5 Low · Not analysed yet · Published 1 Dec 2022 · Tags: CWE-707
- [SourceCodester Canteen Management System categories.php builtin_echo cross site scripting](https://agentprime.io/advisories/CVE-2022-4252.md)
  `CVE-2022-4252` · CVE record: SourceCodester Canteen Management System · CVSS 3.5 Low · Not analysed yet · Published 1 Dec 2022 · Tags: CWE-707
- [Movie Ticket Booking System editBooking.php cross site scripting](https://agentprime.io/advisories/CVE-2022-4251.md)
  `CVE-2022-4251` · CVE record: unspecified Movie Ticket Booking System · CVSS 2.4 Low · Not analysed yet · Published 1 Dec 2022 · Tags: CWE-707
- [Movie Ticket Booking System booking.php cross site scripting](https://agentprime.io/advisories/CVE-2022-4250.md)
  `CVE-2022-4250` · CVE record: unspecified Movie Ticket Booking System · CVSS 3.5 Low · Not analysed yet · Published 1 Dec 2022 · Tags: CWE-707
- [Movie Ticket Booking System POST Request cross site scripting](https://agentprime.io/advisories/CVE-2022-4249.md)
  `CVE-2022-4249` · CVE record: unspecified Movie Ticket Booking System · CVSS 3.5 Low · Not analysed yet · Published 1 Dec 2022 · Tags: CWE-707
- [Movie Ticket Booking System editBooking.php sql injection](https://agentprime.io/advisories/CVE-2022-4248.md)
  `CVE-2022-4248` · CVE record: unspecified Movie Ticket Booking System · CVSS 5.0 Medium · Not analysed yet · Published 1 Dec 2022 · Tags: CWE-707
- [Movie Ticket Booking System booking.php sql injection](https://agentprime.io/advisories/CVE-2022-4247.md)
  `CVE-2022-4247` · CVE record: unspecified Movie Ticket Booking System · CVSS 6.3 Medium · Not analysed yet · Published 1 Dec 2022 · Tags: CWE-707
- [SourceCodester Canteen Management System brand.php builtin_echo cross site scripting](https://agentprime.io/advisories/CVE-2022-4234.md)
  `CVE-2022-4234` · CVE record: SourceCodester Canteen Management System · CVSS 3.5 Low · Not analysed yet · Published 30 Nov 2022 · Tags: CWE-707
- [SourceCodester Event Registration System cross site scripting](https://agentprime.io/advisories/CVE-2022-4233.md)
  `CVE-2022-4233` · CVE record: SourceCodester Event Registration System · CVSS 2.4 Low · Not analysed yet · Published 30 Nov 2022 · Tags: CWE-707
- [SourceCodester Canteen Management System POST Request ajax_invoice.php query sql injection](https://agentprime.io/advisories/CVE-2022-4222.md)
  `CVE-2022-4222` · CVE record: SourceCodester Canteen Management System · CVSS 5.0 Medium · Not analysed yet · Published 30 Nov 2022 · Tags: CWE-707
- [Sapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection](https://agentprime.io/advisories/CVE-2021-4242.md)
  `CVE-2021-4242` · CVE record: Sapido BR270n and 3 more · CVSS 6.3 Medium · Not analysed yet · Published 30 Nov 2022 · Tags: CWE-707
- [SourceCodester Canteen Management System food.php query cross site scripting](https://agentprime.io/advisories/CVE-2022-4091.md)
  `CVE-2022-4091` · CVE record: SourceCodester Canteen Management System · CVSS 3.5 Low · Not analysed yet · Published 25 Nov 2022 · Tags: CWE-707
- [rickxy Stock Management System processlogin.php cross site scripting](https://agentprime.io/advisories/CVE-2022-4089.md)
  `CVE-2022-4089` · CVE record: rickxy Stock Management System · CVSS 4.3 Medium · Not analysed yet · Published 24 Nov 2022 · Tags: CWE-707
- [rickxy Stock Management System processlogin.php sql injection](https://agentprime.io/advisories/CVE-2022-4088.md)
  `CVE-2022-4088` · CVE record: rickxy Stock Management System · CVSS 7.3 High · Not analysed yet · Published 24 Nov 2022 · Tags: CWE-707
- [Unsanitized input leading to code injection in Dalli](https://agentprime.io/advisories/GHSA-3xg8-cc8f-9wv2.md)
  `GHSA-3xg8-cc8f-9wv2`, `CVE-2022-4064` · RubyGems `dalli`: affected `<3.2.3`, fixed in `3.2.3` · CVSS 6.3 Medium · Not analysed yet · Published 19 Nov 2022 · Tags: Other injection, CWE-707

Newest: <https://agentprime.io/advisories/tag/cwe-707.md>
Older: <https://agentprime.io/advisories/tag/cwe-707.md?cursor=WyIyMDIyLTExLTE5VDIxOjMwOjI2LjAwMDAwMFoiLCJHSFNBLTN4ZzgtY2M4Zi05d3YyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-707&cursor=WyIyMDIyLTEyLTE3VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi00NTg3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-707/?cursor=WyIyMDIyLTEyLTE3VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi00NTg3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.