Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5501)
CVE-2020-5501
CWE-352
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47759)
CVE-2026-47759
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47760)
CVE-2026-47760
CWE-707
Medium
WordPress Ultimate Member Plugin Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-6859)
CVE-2020-6859
CWE-639
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4863)
CVE-2020-4863
CWE-707
Medium
osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22608)
CVE-2020-22608
CWE-707
Medium
osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22609)
CVE-2020-22609
CWE-707
Medium
b2evolution URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-22840)
CVE-2020-22840
CWE-601
Medium
IBM RTC CVE-2020-4964 Vulnerability (CVE-2020-4964)
CVE-2020-4964
-
Medium
b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22841)
CVE-2020-22841
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4920)
CVE-2020-4920
CWE-707
Medium
jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23064)
CVE-2020-23064
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4866)
CVE-2020-4866
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4865)
CVE-2020-4865
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4857)
CVE-2020-4857
CWE-707
Medium
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48588)
CVE-2026-48588
CWE-524
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23066)
CVE-2020-23066
CWE-707
Medium
Joomla CVE-2026-48900 Vulnerability (CVE-2026-48900)
CVE-2026-48900
-
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4856)
CVE-2020-4856
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4855)
CVE-2020-4855
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23126)
CVE-2020-23126
CWE-707
Medium
IBM RTC Cross-site Scripting (XSS) Vulnerability (CVE-2020-4733)
CVE-2020-4733
-
Medium
IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4699)
CVE-2020-4699
-
Medium
IBM RTC Cross-site Scripting (XSS) Vulnerability (CVE-2020-4697)
CVE-2020-4697
-
Medium
Chamilo Improper Privilege Management Vulnerability (CVE-2020-23128)
CVE-2020-23128
CWE-269
Medium
WebERP Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-22474)
CVE-2020-22474
CWE-732
Medium
Django Incomplete Comparison with Missing Factors Vulnerability (CVE-2026-48587)
CVE-2026-48587
CWE-1023
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5269)
CVE-2020-5269
CWE-707
Medium
Envoy Proxy Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2026-47778)
CVE-2026-47778
CWE-158
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5265)
CVE-2020-5265
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5264)
CVE-2020-5264
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47761)
CVE-2026-47761
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47762)
CVE-2026-47762
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-21967)
CVE-2020-21967
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22148)
CVE-2020-22148
CWE-707
Medium
Envoy Proxy Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2026-47775)
CVE-2026-47775
CWE-209
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22150)
CVE-2020-22150
CWE-707
Medium
PrestaShop Files or Directories Accessible to External Parties Vulnerability (CVE-2020-5250)
CVE-2020-5250
CWE-552
Medium
Nexus Incorrect Authorization Vulnerability (CVE-2026-77122)
CVE-2026-77122
CWE-863
Medium
IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-4974)
CVE-2020-4974
CWE-918
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22251)
CVE-2020-22251
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5031)
CVE-2020-5031
CWE-707
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-48090)
CVE-2026-48090
CWE-416
Medium
UAParser.js Uncontrolled Resource Consumption Vulnerability (CVE-2026-48125)
CVE-2026-48125
CWE-400
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48560)
CVE-2026-48560
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48562)
CVE-2026-48562
CWE-707
Medium
OpenSSL Improper Validation of Integrity Check Value Vulnerability (CVE-2026-75803)
CVE-2026-75803
CWE-354
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5004)
CVE-2020-5004
CWE-707
Medium
IBM RTC Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-4989)
CVE-2020-4989
CWE-668
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4975)
CVE-2020-4975
CWE-707
Medium
Nexus Incorrect Authorization Vulnerability (CVE-2026-77125)
CVE-2026-77125
CWE-863
Medium
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-1935)
CVE-2020-1935
CWE-444
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9467)
CVE-2020-9467
CWE-707
Medium
SharePoint CVE-2020-1505 Vulnerability (CVE-2020-1505)
CVE-2020-1505
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45467)
CVE-2026-45467
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45468)
CVE-2026-45468
CWE-707
Medium
SharePoint CVE-2020-1501 Vulnerability (CVE-2020-1501)
CVE-2020-1501
-
Medium
SharePoint CVE-2020-1502 Vulnerability (CVE-2020-1502)
CVE-2020-1502
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45479)
CVE-2026-45479
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45481)
CVE-2026-45481
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8421)
CVE-2020-8421
CWE-707
Medium
SharePoint CVE-2020-1503 Vulnerability (CVE-2020-1503)
CVE-2020-1503
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45483)
CVE-2026-45483
CWE-707
Medium
Python Improper Input Validation Vulnerability (CVE-2020-8315)
CVE-2020-8315
CWE-20
Medium
Python Uncontrolled Resource Consumption Vulnerability (CVE-2020-8492)
CVE-2020-8492
CWE-400
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8264)
CVE-2020-8264
CWE-707
Medium
phpBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-8226)
CVE-2020-8226
CWE-918
Medium
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-46417)
CVE-2026-46417
CWE-918
Medium
Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2020-8185)
CVE-2020-8185
CWE-400
Medium
Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8167)
CVE-2020-8167
CWE-352
Medium
Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8166)
CVE-2020-8166
CWE-352
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1514)
CVE-2020-1514
CWE-707
Medium
SharePoint CVE-2020-1523 Vulnerability (CVE-2020-1523)
CVE-2020-1523
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1573)
CVE-2020-1573
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45465)
CVE-2026-45465
CWE-707
Medium