CWE-81 · Cross-site Scripting
Improper Neutralization of Script in an Error Message Web Page
9CVEs
0exploited
1with a public check
0likely (EPSS 10%+)
SortMost likely exploited
9 CVEs with CWE-81 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-6892CheckJournyx 11.5.4 - Reflected Cross Site ScriptingJournyx · Journyx (jtime) · CVSS 6.1 · 2024-08-07 | 6.1 | 0.8% | 2024-08-07 |
| CVE-2022-4137Keycloak: reflected xss attackRed Hat · Red Hat Single Sign-On 7 · CVSS 8.1 · 2023-09-25 | 8.1 | 1.2% | 2023-09-25 |
| CVE-2022-4361Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an atta…keycloak · keycloak · CVSS 10 · 2023-07-07 | 10.0 | 0.7% | 2023-07-07 |
| CVE-2019-25027Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13Vaadin · Vaadin · CVSS 6.1 · 2021-04-23 | 6.1 | 0.7% | 2021-04-23 |
| CVE-2024-47882OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious projectOpenRefine · OpenRefine · CVSS 5.9 · 2024-10-24 | 5.9 | 0.5% | 2024-10-24 |
| CVE-2025-24344A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags and, possibly, execute…Bosch Rexroth AG · ctrlX OS - Solutions · CVSS 6.3 · 2025-04-30 | 6.3 | 0.4% | 2025-04-30 |
| CVE-2025-0883vulnerability has been discovered in OpenText™ Service Manager.OpenText™ · Service Manager · CVSS 2.1 · 2025-03-12 | 2.1 | 0.3% | 2025-03-12 |
| CVE-2024-47064Computer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpointscvat-ai · cvat · CVSS 6.3 · 2024-09-30 | 6.3 | 0.3% | 2024-09-30 |
| CVE-2026-41568Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapmoby · moby · CVSS 6.1 · 2026-06-12 | 6.1 | 0.1% | 2026-06-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.