CVE-2021-3938

LOW Year: 2021
CVSS v3 Score
3.9
Low
CVSS v2 Score
3.5
Low
Weakness Type
CWE-79
View all →

Vulnerability Description

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Related Vulnerabilities

CVE-2024-38503

LOW
CVSS:3.9(Low)

When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduse...

CWE-792024

CVE-2018-11352

MEDIUM
CVSS:4.0(Medium)

The Wallabag application 2.2.3 to 2.3.2 is affected by one cross-site scripting (XSS) vulnerability that is stored within the configuration page. This vulnerability enables the execution of a JavaScri...

CWE-792018

CVE-2019-4148

MEDIUM
CVSS:4.0(Medium)

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering t...

CWE-792019

CVE-2021-3830

LOW
CVSS:3.8(Low)

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-792021

CVE-2022-0704

MEDIUM
CVSS:4.0(Medium)

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

CWE-792022

CVE-2022-1530

LOW
CVSS:3.8(Low)

Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application.

CWE-792022