CWE-692

10 CVEs classified under CWE-692. Browse by severity and year.

Top CVEs for CWE-692
CVESeverityScorePublishedSummary
CVE-2024-52305Medium6.52024-11-13UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowin…
CVE-2023-26047Medium6.52023-03-03teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerabl…
CVE-2026-71478Medium6.12026-08-06league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link fi…
CVE-2025-20240Medium6.12025-09-24A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site sc…
CVE-2025-49590Medium6.12025-06-18CryptPad is a collaboration suite. Prior to version 2025.3.0, the "Link Bouncer" functionality attempts to filter javascript URIs to prevent Cross-Site Scripti…
CVE-2024-42214Medium5.32026-07-17HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are…
CVE-2024-30924Medium4.62024-04-18Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.
CVE-2026-15295Medium4.42026-07-10The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and…
CVE-2024-23569Medium4.32026-07-17HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header
CVE-2025-539042025-07-16The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/admin.js` contains code that could make the website…
All CVEs classified under CWE-692 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-71478Medium6.12026-08-06league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link fi…
CVE-2024-42214Medium5.32026-07-17HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are…
CVE-2024-23569Medium4.32026-07-17HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header
CVE-2026-15295Medium4.42026-07-10The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and…
CVE-2025-20240Medium6.12025-09-24A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site sc…
CVE-2025-539042025-07-16The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/admin.js` contains code that could make the website…
CVE-2025-49590Medium6.12025-06-18CryptPad is a collaboration suite. Prior to version 2025.3.0, the "Link Bouncer" functionality attempts to filter javascript URIs to prevent Cross-Site Scripti…
CVE-2024-52305Medium6.52024-11-13UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowin…
CVE-2024-30924Medium4.62024-04-18Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.
CVE-2023-26047Medium6.52023-03-03teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerabl…