Plugins Search

IDNameProductFamilyPublishedUpdatedSeverity
272737Liferay Portal 7.4.3.8 < 7.4.3.112 XSSNessusCGI abuses : XSS11/5/202511/7/2025
medium
31120BEA Plumtree portal/server.pt name Parameter XSSNessusCGI abuses : XSS2/20/20084/11/2022
medium
32136Sun Java System Web Server Search Module XSSNessusCGI abuses : XSS5/9/20084/11/2022
medium
34336MailMarshal Spam Quarantine Management (SQM) Multiple Component XSSNessusCGI abuses : XSS10/3/20081/19/2021
low
35281IceWarp Merak Mail Server < 9.4.0 IMG Tag XSSNessusCGI abuses : XSS12/30/20084/11/2022
medium
406133CX Phone System login.php Multiple Parameter XSSNessusCGI abuses : XSS8/18/20094/11/2022
medium
42340Adobe ColdFusion <= 8.0.1 _logintowizard.cfm XSSNessusCGI abuses : XSS11/2/20094/11/2022
medium
42435XOOPS misc.php Query String XSSNessusCGI abuses : XSS11/10/20099/29/2025
medium
42475Axon Virtual PBX /logon Multiple Parameter XSSNessusCGI abuses : XSS11/12/20099/29/2025
medium
42979DNN (DotNetNuke) < 5.2.0 SearchResults.aspx XSSNessusCGI abuses : XSS12/2/20099/29/2025
medium
44320Mort Bay Jetty Multiple XSSNessusCGI abuses : XSS1/26/20109/29/2025
medium
44332SilverStripe Forums Module 'Search' Parameter XSSNessusCGI abuses : XSS1/28/20109/29/2025
medium
46693Resin resin-admin/digest.php XSSNessusCGI abuses : XSS5/21/20109/29/2025
medium
46790ManageEngine ADAudit Plus 'reportList' Parameter XSSNessusCGI abuses : XSS6/2/20109/29/2025
medium
49696Atmail WebMail < 6.2.0 (6.20) 'MailType' Parameter XSSNessusCGI abuses : XSS9/30/20104/11/2022
medium
51370Git gitweb Multiple Parameter XSSNessusCGI abuses : XSS12/23/20109/29/2025
medium
51816Crystal Reports Server InfoView logonAction Parameter XSSNessusCGI abuses : XSS1/28/20119/29/2025
medium
51955Adobe ColdFusion login.cfm Query String XSS (APSB11-04)NessusCGI abuses : XSS2/11/20119/29/2025
medium
52659IBM Lotus Sametime Server stconf.nsf messageString Parameter XSSNessusCGI abuses : XSS3/14/20119/29/2025
medium
55831HP OpenView Performance Insight sendEmail.jsp XSSNessusCGI abuses : XSS8/12/20119/29/2025
medium
55903CGI Generic XSS (extended patterns)NessusCGI abuses : XSS8/3/20114/11/2022
medium
56652phpMyAdmin 3.4.x < 3.4.6 XSS (PMASA-2011-16)NessusCGI abuses : XSS10/26/20114/11/2022
medium
57981Oracle WebCenter Content idc/idcplg Multiple Parameter XSSNessusCGI abuses : XSS2/16/20129/29/2025
medium
58582McAfee WebShield UI ProcessTextFile bodyStyle Parameter XSS (SB10020)NessusCGI abuses : XSS4/3/20129/29/2025
medium
59097Symantec Web Gateway timer.php XSS (SYM12-006)NessusCGI abuses : XSS5/15/20129/29/2025
medium
60094Apache Struts struts-examples upload-submit.do 'theText' Parameter XSSNessusCGI abuses : XSS7/23/20124/11/2022
medium
61430Nagios XI < 2011R1.9 login.php XSSNessusCGI abuses : XSS8/6/20129/29/2025
medium
63064Wordfence Plugin for WordPress 'email' Parameter XSSNessusCGI abuses : XSS11/27/20129/29/2025
medium
64931MoinMoin rsslink() Function page_name Parameter XSSNessusCGI abuses : XSS2/28/20139/29/2025
medium
65030LogAnalyzer asktheoracle.php 'query' Parameter XSSNessusCGI abuses : XSS3/5/20139/29/2025
medium
65738McAfee Vulnerability Manager cert_cn Parameter XSSNessusCGI abuses : XSS3/29/20131/19/2021
medium
68933McAfee ePolicy Orchestrator < 4.6.7 Multiple XSSNessusCGI abuses : XSS7/17/20131/19/2021
medium
69018VLC Web Interface XML Services XSSNessusCGI abuses : XSS7/23/20139/29/2025
medium
70411Dell iDRAC6 / iDRAC7 Login Page 'ErrorMsg' Parameter XSSNessusCGI abuses : XSS10/13/20134/11/2022
medium
70920Drupal Google Site Search Module API Data Handling XSSNessusCGI abuses : XSS11/15/20134/11/2022
medium
71847Novell Identity Manager Roles Based Provisioning Module taskId XSSNessusCGI abuses : XSS1/7/20141/19/2021
medium
72344Synology DiskStation Manager < 4.3-3776 Update 3 info.cgi Multiple Parameters XSSNessusCGI abuses : XSS2/5/20141/19/2021
medium
72683ASUS Routers flag Parameter XSSNessusCGI abuses : XSS2/25/20149/29/2025
medium
72714phpMyAdmin 3.x >= 3.3.1 / 4.x < 4.1.7 import.php XSS (PMASA-2014-1)NessusCGI abuses : XSS2/26/20145/14/2025
low
73524Fortinet FortiMail < 4.3.4 / 5.0.0 Multiple XSSNessusCGI abuses : XSS4/15/20141/19/2021
medium
73620Atmail Webmail < 6.5.0 'DOM processor' XSSNessusCGI abuses : XSS4/18/20145/14/2025
medium
76277phpMyAdmin 4.2.x < 4.2.4 Recent/Favorite Table Navigation Multiple XSS (PMASA-2014-2)NessusCGI abuses : XSS6/27/20145/14/2025
low
76278phpMyAdmin 4.1.x < 4.1.14.1 / 4.2.x < 4.2.4 Navigation Hiding Items Multiple XSS (PMASA-2014-3)NessusCGI abuses : XSS6/27/20145/14/2025
low
77684Riverbed SteelApp (Stingray) Traffic Manager < 9.7 Multiple XSSNessusCGI abuses : XSS9/15/20141/19/2021
medium
77706Usermin < 1.600 Multiple VulnerabilitiesNessusCGI abuses : XSS9/16/20141/19/2021
medium
78109MediaWiki < 1.19.20 / 1.22.12 / 1.23.5 'includes/OutputPage.php' XSSNessusCGI abuses : XSS10/9/20145/14/2025
low
78233phpMyAdmin 4.0.x < 4.0.10.4 / 4.1.x < 4.1.14.5 / 4.2.x < 4.2.9.1 'ENUM' Value XSS (PMASA-2014-11)NessusCGI abuses : XSS10/10/20145/14/2025
low
79385Google Calendar Events Plugin for WordPress 'admin-ajax.php' XSSNessusCGI abuses : XSS11/21/20149/29/2025
medium
79624Apache Traffic Server Host HTTP XSSNessusCGI abuses : XSS11/28/20141/19/2021
medium
81319DNN (DotNetNuke) < 7.4.0 Unspecified Persistent XSSNessusCGI abuses : XSS2/12/20155/14/2025
medium