Common Weakness Enumeration
CWE-707 Improper Neutralization
Description
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-707 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-4gmq-m9vp-jrwg | - | LOW |
Duplicate Advisory: Umbraco CMS Cross-site Scripting vulnerability |
2025-02-19 | |
| GHSA-5pqf-rvm7-3wgw | CVE-2022-4638 | MODERATE |
collective.contact.widget is vulnerable to cross-site scripting |
2024-09-13 | |
| GHSA-m738-584h-26p6 | CVE-2022-3801 | HIGH |
IBAX go-ibax vulnerable to SQL injection |
2024-04-24 | |
| GHSA-894q-wpg5-mf2h | CVE-2022-4396 | MODERATE |
pyRdfa3 Cross-site Scripting vulnerability |
2024-04-08 | |
| GHSA-9chr-4fjh-5rgw | CVE-2022-3704 | LOW |
Cross-site Scripting in actionpack |
2023-01-23 |