Web Browser XSS Protection Not Enabled

Home/Alerts/Alert detail/

Summary: Web Browser XSS Protection is not enabled, or is disabled by the configuration of the ‘X-XSS-Protection’ HTTP response header on the web serverNo longer widely supported by browsers.

Latest Security News

390,000 WordPress accounts stolen from hackers in supply chain attack

Auto parts giant LKQ says cyberattack disrupted Canadian business unit

Citrix shares mitigations for ongoing Netscaler password spray attacks

CISA confirms critical Cleo bug exploitation in ransomware attacks

FTC warns of online task job scams hooking victims like gambling

CISA warns water facilities to secure HMI systems exposed online

Russia blocks Viber in latest attempt to censor communications

Russian cyberspies target Android users with new spyware

Common Alerts

Latest CVE List

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability

CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability

CVE-2024-11680 ProjectSend Improper Authentication Vulnerability

CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability

CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

Top CWE List

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-1395 Dependency on Vulnerable Third-Party Component

CWE-66 Improper Handling of File Names that Identify Virtual Resources

CWE-1426 Improper Validation of Generative AI Output

CWE-328 Use of Weak Hash

Free security scan for your website

Don't show website scan report rating on the leaderboard