Vulnerability Category — XSS

Chinese name:
跨站脚本
CVE ID：
79
Detail：
跨站脚本，即Cross Site Script (通常简写为XSS)是指攻击者利用网站程序对用户输入过滤不足，输入可以显示在页面上对其他用户造成影响的HTML代码，从而盗取用户资料、利用用户身份进行某种动作或者对访问者进行病毒侵害的一种攻击方式。

Related Vulnerabilities

SSV ID Name
SSV-99728 Zimbra XSS跨站脚本漏洞（CVE-2023-34192）
SSV-99644 phpstudy 小皮面板运维系统XSS漏洞
SSV-99585 Cobalt Strike 存储型xss漏洞（CVE-2022-39197）
SSV-99530 Wordpress 存储型XSS漏洞（CVE-2022-21662）
SSV-99469 Zimbra存储型XSS漏洞(CVE-2022-24682)
SSV-99421 IP-Board 多处存储型XSS漏洞（CVE-2021-39249 CVE-2021-39250）
SSV-99279 IceWarp 反射型XSS (CVE-2020-8512)漏洞
SSV-99273 Joomla 存储型XSS漏洞(CVE-2021-26032)
SSV-98422 GE Reason S20 Ethernet Switch XSS(CVE-2020-16242 CVE-2020-16246)
SSV-98319 Roundcube webmail 存储型XSS漏洞（CVE-2020-15562）
SSV-98281 Centreon 20.04 后台反射性XSS漏洞
SSV-98274 weiphp5.0 Material.php未授权访问与存储型XSS漏洞
SSV-98272 weiphp5.0 Award.php未授权访问与存储型XSS漏洞
SSV-98271 weiphp5.0 Games.php未授权访问与存储型XSS漏洞
SSV-98270 weiphp5.0 WeiSite.php未授权访问与存储型XSS漏洞
SSV-98269 weiphp5.0 Category.php未授权访问与存储型XSS漏洞
SSV-98268 weiphp5.0 Cms.php未授权访问与存储型XSS漏洞
SSV-98267 weiphp5.0官方插件微考试/index.php/exam/exam/add页面未授权访问及存储型xss漏洞
SSV-98266 weiphp5.0官方插件微投票 Vote.php未授权访问及存储型xss漏洞
SSV-98265 weiphp5.0官方插件微考试Question.php页面未授权访问及存储型xss漏洞
SSV-98264 weiphp5.0官方插件微预约Reserve.php未授权访问及存储型xss漏洞
SSV-98254 weiphp存储性XSS漏洞
SSV-98250 weiphp5.0 AuthGroup.php未授权访问与存储型XSS漏洞
SSV-98247 Wordpress IMPress for IDX Broker 低权限xss漏洞
SSV-98174 Ericsson Multiple Stored & Reflected XSS
SSV-98173 Xirrus WiFi - XSS - (CVE-2020-9022)
SSV-98171 Multiple Reflected XSS in UHP routers (CVE-2020-7235 - CVE-2020-7236)
SSV-98169 Stored Cross-Site Scripting (Authenticated) in SYROTECH SY-GOPON-1000-2WONU V2.1.7_X116 devices
SSV-98168 Symmetricom SyncServer S100/S200/S250/S300/S350 - Stored XSS - Not authenticated - (CVE-2020-9028)
SSV-98165 Steelcase Sala por favor
SSV-98164 Sonoff TH Module XSS
SSV-98163 Smc Networks Stored Cross Site Scripting (Authenticated) in SMC D3G0804W Router (CVE-‪2020-7249)
SSV-98161 Climatix, BACnet Communication Card, Multibles #XSS - (CVE-2020-7574 & CVE-2020-7575 )
SSV-98157 lifesize devices allow XSS via the interface/interface.php brand parameter - CVE-2018-17981
SSV-98154 Iteris Vantage Velocity Field Unit - Multiple Stored XSS vulnerabilities - (CVE-2020-9025)
SSV-98147 Eaton Authenticated Stored Cross Site Scripting (CVE-2020-7915)
SSV-98023 pfsense 2.4.4-RELEASE-p3 反射性xss
SSV-97997 WebPort 1.19.1 储存型XSS#3
SSV-97996 WebPort 1.19.1 储存型XSS#2
SSV-97994 WebPort 1.19.1 储存性XSS
SSV-97973 Tpshop 后台User.php 反射性xss
SSV-97953 Jeesns Question Store XSS
SSV-97952 Jeesns Article‘s Comments Store XSS
SSV-97951 Jeesns Article Store XSS
SSV-97950 Jeesns Weibo Topic Reflection XSS
SSV-97949 Jeesns Weibo Comments store XSS
SSV-97948 Jeesns Weibo store XSS
SSV-97947 Jeesns Album Store XSS
SSV-97946 Jeesns Message Store XSS
SSV-97945 Jeesns Group Posts Store XSS
SSV-97944 Jeesns Group‘s Comments Store XSS
SSV-97943 Jeesns Group Store XSS
SSV-97942 Jeesns Answer Store XSS
SSV-97941 Jeesns Administrator login Store XSS
SSV-97940 Jeesns Error Reminder Reflecting XSS
SSV-97939 Jeesns newVersion Reflection XSS
SSV-97931 GetSimpleCMS反射性xss#2
SSV-97930 GetSimpleCMS反射性xss
SSV-97929 GetSimpleCMS限制反射性XSS
SSV-97928 GetSimpleCMS任意URL跳转
SSV-97926 gnuboard5 反射性xss
SSV-97879 Jfinal cms profile stored XSS
SSV-97878 Jfinal cms article stored XSS
SSV-97877 Jfinal cms regist stored XSS
SSV-97876 Jfinal cms comment stored XSS
SSV-97875 Jfinal cms advice stored XSS
SSV-97869 Ecshop 3.x&4.0版本反射型XSS
SSV-97865 phpshe 1.7版本反射型XSS漏洞
SSV-97852 wordpress ari-adminer 储存型XSS
SSV-97849 OFCMS background role management storage type XSS
SSV-97848 OFCMS background website basic settings storage type XSS
SSV-97847 OFCMS background site management storage type XSS
SSV-97846 OFCMS background site announcement storage type XSS
SSV-97845 OFCMS background column management storage type XSS
SSV-97844 OFCMS background Advertising management storage type XSS
SSV-97843 OFCMS background theme management storage type XSS
SSV-97842 OFCMS background Friendly link management storage type XSS
SSV-97841 OFCMS background single page management storage type XSS
SSV-97840 OFCMS background form management storage type XSS
SSV-97813 Vanilla Forums < 2.5 Stored XSS in any message
SSV-97812 Invision Power Board 3.3.1 - 3.4.8 stored XSS in any message
SSV-97776 Cisco ISE Unauthenticated XSS to Privileged RCE
SSV-97773 Metinfo 6.x存储型XSS (CVE-2018-20486)
SSV-97768 MetInfo6 后台存储型XSS
SSV-97766 zoneminder反射性xss2
SSV-97764 zoneminder反射性xss
SSV-97750 Stored XSS on WordPress.org
SSV-97736 Cisco DPC3928SL XSS (CVE-2018-20379)
SSV-97729 ESPCMS 最新版p8 存储型XSS漏洞
SSV-97706 S-CMS建站系统存储型XSS
SSV-97698 seacms v6.64一处存储型xss
SSV-97696 metinfo最新版一处任意响应头设置漏洞结合反射型xss可bypass chrome
SSV-97695 Metinfo 反射型xss可打管理员cookie
SSV-97678 ESPCMS P8.18101601n 前台XSS
SSV-97714 Nagios XI <=5.5.7 Reflect XSS#2
SSV-97713 Nagios XI <=5.5.7 Reflect XSS#1
SSV-97539 TradingView XSS漏洞
SSV-97495 otcms友情链接储存xss
SSV-97438 Sngine v2.5.3 通用型反射XSS漏洞
SSV-97380 KYOCERA Net Admin 3.4 Multiple XSS Vulnerabilities
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. 简体中文