Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.130426185443

Medium Severity Vulnerabilities

Found 15753 vulnerabilities at Medium severity.

Reference
Title
Technology
CVE-2014-1403
easyXDM Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
easyXDM
CVE-2023-27739
easyXDM Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
easyXDM
CVE-2016-4566
Plupload Cross-site Scripting (XSS) Vulnerability
Plupload
CVE-2019-16728
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2020-26870
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2019-25155
DOMPurify URL Redirection to Untrusted Site (Open Redirect) Vulnerability
DOMPurify
CVE-2024-45801
DOMPurify Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
DOMPurify
CVE-2024-47875
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2025-26791
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-0540
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2025-15599
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-41240
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-49978
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-49459
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-49458
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-65914
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-65913
DOMPurify Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
DOMPurify
CVE-2026-65912
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-65911
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-65904
DOMPurify Improper Check for Unusual or Exceptional Conditions Vulnerability
DOMPurify
CVE-2026-65903
DOMPurify Incorrect Comparison Vulnerability
DOMPurify
CVE-2026-65902
DOMPurify Trust Boundary Violation Vulnerability
DOMPurify
CVE-2026-65901
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-65900
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2026-65899
DOMPurify Protection Mechanism Failure Vulnerability
DOMPurify
CVE-2026-66010
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DOMPurify
CVE-2014-5326
DWR Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
DWR
CVE-2014-5325
DWR Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
DWR
CVE-2018-1000079
RubyGems Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
RubyGems
CVE-2018-1000078
RubyGems Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
RubyGems