CWE-79
48,742 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (48,742)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS.
This issue affects LayerSlider: from n/a through 8.4.0. |
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. |
Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions. |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.14.3. |
Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions. |
Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions. |
Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions. |
Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions. |
Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions. |
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions. |
Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions. |
Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions. |
Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions. |
Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions. |
Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions. |