{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T19:58:23.236Z",
  "tag": {
    "id": "xss",
    "label": "XSS",
    "isStack": false,
    "url": "https://pwn.watch/t/xss",
    "feed": "https://pwn.watch/t/xss/feed.xml"
  },
  "counts": {
    "incidents": 4,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 4
  },
  "incidents": [
    {
      "slug": "roundcube-webmail-cve-2023-5631",
      "title": "Roundcube Webmail: Persistent Cross-Site Scripting (XSS) (CVE-2023-5631)",
      "url": "https://pwn.watch/i/roundcube-webmail-cve-2023-5631",
      "json": "https://pwn.watch/i/roundcube-webmail-cve-2023-5631.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "Roundcube Webmail",
      "tags": [
        "php",
        "roundcube",
        "cisa-kev",
        "xss"
      ],
      "cveIds": [
        "CVE-2023-5631"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-10-26",
      "closedAt": "2023-10-26",
      "updatedAt": "2023-10-26",
      "summary": "Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code. Added to CISA KEV on 2023-10-26.",
      "xPost": null
    },
    {
      "slug": "synacor-zimbra-collaboration-suite-zcs-cve-2023-37580",
      "title": "Synacor Zimbra Collaboration Suite (ZCS): Cross-Site Scripting (XSS) (CVE-2023-37580)",
      "url": "https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-37580",
      "json": "https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-37580.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "Synacor Zimbra Collaboration Suite (ZCS)",
      "tags": [
        "synacor",
        "zimbra",
        "cisa-kev",
        "xss"
      ],
      "cveIds": [
        "CVE-2023-37580"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-07-27",
      "closedAt": "2023-07-27",
      "updatedAt": "2023-07-27",
      "summary": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data. Added to CISA KEV on 2023-07-27.",
      "xPost": null
    },
    {
      "slug": "synacor-zimbra-collaboration-suite-zcs-cve-2022-27926",
      "title": "Synacor Zimbra Collaboration Suite (ZCS): Cross-Site Scripting (XSS) (CVE-2022-27926)",
      "url": "https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2022-27926",
      "json": "https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2022-27926.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "Synacor Zimbra Collaboration Suite (ZCS)",
      "tags": [
        "synacor",
        "zimbra",
        "cisa-kev",
        "xss"
      ],
      "cveIds": [
        "CVE-2022-27926"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-04-03",
      "closedAt": "2023-04-03",
      "updatedAt": "2023-04-03",
      "summary": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing. Added to CISA KEV on 2023-04-03.",
      "xPost": null
    },
    {
      "slug": "fortra-cobalt-strike-cve-2022-39197-42948",
      "title": "Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948)",
      "url": "https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948",
      "json": "https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Fortra Cobalt Strike",
      "tags": [
        "fortra",
        "cisa-kev",
        "rce",
        "xss"
      ],
      "cveIds": [
        "CVE-2022-39197",
        "CVE-2022-42948"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-03-30",
      "closedAt": "2023-03-30",
      "updatedAt": "2023-03-30",
      "summary": "Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely. Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. Added to CISA KEV on 2023-03-30.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "roundcube-webmail-cve-2023-5631",
      "incidentTitle": "Roundcube Webmail: Persistent Cross-Site Scripting (XSS) (CVE-2023-5631)",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-26",
      "title": "CISA added CVE-2023-5631 to the KEV catalog (due 2023-11-16).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/roundcube-webmail-cve-2023-5631"
    },
    {
      "incident": "synacor-zimbra-collaboration-suite-zcs-cve-2023-37580",
      "incidentTitle": "Synacor Zimbra Collaboration Suite (ZCS): Cross-Site Scripting (XSS) (CVE-2023-37580)",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-07-27",
      "title": "CISA added CVE-2023-37580 to the KEV catalog (due 2023-08-17).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-37580"
    },
    {
      "incident": "synacor-zimbra-collaboration-suite-zcs-cve-2022-27926",
      "incidentTitle": "Synacor Zimbra Collaboration Suite (ZCS): Cross-Site Scripting (XSS) (CVE-2022-27926)",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-04-03",
      "title": "CISA added CVE-2022-27926 to the KEV catalog (due 2023-04-24).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2022-27926"
    },
    {
      "incident": "fortra-cobalt-strike-cve-2022-39197-42948",
      "incidentTitle": "Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-03-30",
      "title": "CISA added CVE-2022-39197 to the KEV catalog (due 2023-04-20).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948"
    },
    {
      "incident": "fortra-cobalt-strike-cve-2022-39197-42948",
      "incidentTitle": "Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-03-30",
      "title": "CISA added CVE-2022-42948 to the KEV catalog (due 2023-04-20).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948"
    }
  ]
}