XSS

Security incidents tagged XSS. Newest first.

0 XSS incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Incidents: 4
Live: 0
Patched: 4
Days without an incident: 1092; Longest quiet run: 1092 days (Oct 27–Oct 22)

Show 4 older incidents

Oct 26MediumRoundcube Webmail: Persistent Cross-Site Scripting (XSS) (CVE-2023-5631)Patched
Roundcube Webmail Patched
Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code. Added to CISA KEV on 2023-10-26.
Open incident →CVE-2023-5631

Jul 27MediumSynacor Zimbra Collaboration Suite (ZCS): Cross-Site Scripting (XSS) (CVE-2023-37580)Patched
Synacor Zimbra Collaboration Suite (ZCS) Patched
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data. Added to CISA KEV on 2023-07-27.
Open incident →CVE-2023-37580

Apr 3MediumSynacor Zimbra Collaboration Suite (ZCS): Cross-Site Scripting (XSS) (CVE-2022-27926)Patched
Synacor Zimbra Collaboration Suite (ZCS) Patched
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing. Added to CISA KEV on 2023-04-03.
Open incident →CVE-2022-27926

Mar 30CriticalFortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948)Patched
Fortra Cobalt Strike Patched
Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely. Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. Added to CISA KEV on 2023-03-30.
Open incident →CVE-2022-39197 · CVE-2022-42948