Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.130426185443

Medium Severity Vulnerabilities

Found 15753 vulnerabilities at Medium severity.

Reference
Title
Technology
CVE-2024-45613
CKEditor Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
CKEditor
CVE-2021-21254
CKEditor Uncontrolled Resource Consumption Vulnerability
CKEditor
CVE-2026-28343
CKEditor Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
CKEditor
CVE-2019-8331
Bootstrap Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Bootstrap
CVE-2018-20677
Bootstrap Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Bootstrap
CVE-2018-20676
Bootstrap Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Bootstrap
CVE-2016-10735
Bootstrap Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Bootstrap
CVE-2018-14042
Bootstrap Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Bootstrap
CVE-2018-14041
Bootstrap Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Bootstrap
CVE-2018-14040
Bootstrap Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Bootstrap
No CVE number
jsTree Cross-site Scripting (XSS) Vulnerability
jsTree
CVE-2016-4055
Moment.js Uncontrolled Resource Consumption Vulnerability
Moment.js
CVE-2016-10744
Select2 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Select2
CVE-2019-14862
Knockout.js Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Knockout.js
No CVE number
Knockout.js Cross-site Scripting (XSS) Vulnerability
Knockout.js
CVE-2013-5042
ASP.NET SignalR Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
ASP.NET SignalR
CVE-2018-6341
React Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
React
CVE-2025-55183
React Vulnerability
React
CVE-2012-0829
Mibew Messenger Cross-Site Request Forgery (CSRF) Vulnerability
Mibew Messenger
CVE-2018-20420
WebERP Incorrect Permission Assignment for Critical Resource Vulnerability
WebERP
CVE-2020-22474
WebERP Incorrect Permission Assignment for Critical Resource Vulnerability
WebERP
CVE-2025-46053
WebERP Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
WebERP
CVE-2020-21244
Frontaccounting Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Frontaccounting
CVE-2011-3740
Frontaccounting Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Frontaccounting
CVE-2007-5148
Frontaccounting Improper Control of Generation of Code (Code Injection) Vulnerability
Frontaccounting
CVE-2026-80210
FrontAccounting Cross-Site Request Forgery (CSRF) Vulnerability
Frontaccounting
CVE-2026-80211
FrontAccounting Use of Password Hash With Insufficient Computational Effort Vulnerability
Frontaccounting
CVE-2013-6267
Claroline Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Claroline
CVE-2011-3716
Claroline Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Claroline
CVE-2009-1907
Claroline Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Claroline