Weaknesses of type CWE-80
552 resultsCVE-2026-29106MEDIUMSuiteCRM has blind XSS in return_id parameterEPSS 0.1%CVE-2023-3481MEDIUMXSS in Chrome Lab CrittersEPSS 0.1%CVE-2025-58412MEDIUMA improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.0, FortiADC 7.6.0 thrEPSS 0.1%CVE-2025-54348MEDIUMA Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2EPSS 0.1%CVE-2026-44259MEDIUMefw4.X: Stored XSS via previewServletEPSS 0.1%CVE-2026-42451MEDIUMGrimmory: Stored XSS via Malicious EPUB Enables Session Token TheftEPSS 0.1%CVE-2026-0396LOWHTML injection in the web dashboardEPSS 0.1%CVE-2025-8386HIGHAVEVA Application Server IDE Basic Cross-site ScriptingEPSS 0.1%CVE-2025-64187MEDIUMOctoPrint is vulnerable to XSS through Action Command Notifications and PromptsEPSS 0.1%CVE-2025-58430HIGHlistmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account TakeoverEPSS 0.1%CVE-2025-59854LOWHCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerabilityEPSS 0.1%CVE-2026-50229—Apache Tomcat: XSS in number guess exampleEPSS —