← Back
CWE-79

46,906 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (46,906)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-47544
1Atarim
2Atarim
Visual Collaboration
Jun 17, 2026
Nov 14, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.12 versions.
CVE-2023-47533
1Wpdevart
1Countdown And Countup, Woocommerce Sales Timer
Jun 17, 2026
Nov 14, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Timer plugin <= 1.8.2 versions.
CVE-2023-36007
1Microsoft
1Send Customer Voice Survey From Dynamics 365
Jun 17, 2026
Nov 14, 2023
N/A· v4
4.1 MEDIUM· v3
N/A· v2
Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability
CVE-2023-47646
1Cedcommerce
1Recently Viewed And Most Viewed Products
Jun 17, 2026
Nov 14, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (Shop Manager+) Stored Cross-Site Scripting (XSS) vulnerability in CedCommerce Recently viewed and most viewed products plugin <= 1.1.1 versions.
CVE-2023-47554
1Denk
1Actueel Financieel Nieuws
Jun 17, 2026
Nov 14, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solutions plugin <= 5.1.0 versions.
CVE-2023-47125
1Typo3
2Html Sanitizer
Typo3
Jun 17, 2026
Nov 14, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mecha...Show more
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versions 1.5.3 and 2.1.4. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-26222
1Tibco
1Ebx
Jun 17, 2026
Nov 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network...Show more
The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.22 and below, versions 6.0.13 and below and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 5.0.0 and below. Show less
CVE-2023-47658
1Actpro
1Extra Product Options For Woocommerce
Jun 17, 2026
Nov 14, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in actpro Extra Product Options for WooCommerce plugin <= 3.0.3 versions.
CVE-2023-47656
1Marcomilesi
1Anac Xml Bandi Di Gara
Jun 17, 2026
Nov 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions.
CVE-2023-47654
1Livescore
1Bzscore
Jun 17, 2026
Nov 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in livescore.Bz BZScore – Live Score plugin <= 1.03 versions.
CVE-2023-47653
1Theweb Designs
1Twb Woocommerce
Jun 17, 2026
Nov 14, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abu Bakar TWB Woocommerce Reviews plugin <= 1.7.5 versions.
CVE-2023-36410
1Microsoft
1Dynamics 365
Jun 17, 2026
Nov 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-36031
1Microsoft
1Dynamics 365
Jun 17, 2026
Nov 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-36030
1Microsoft
1Dynamics 365
Jun 17, 2026
Nov 14, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Microsoft Dynamics 365 Sales Spoofing Vulnerability
CVE-2023-36016
1Microsoft
1Dynamics 365
Jun 17, 2026
Nov 14, 2023
N/A· v4
3.4 LOW· v3
N/A· v2
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-48094
1Cesium
1Cesiumjs
Jun 17, 2026
Nov 14, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context of the victim's browser via sending a crafted payload to /container_files/public_html/doc/index.html...Show more
A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context of the victim's browser via sending a crafted payload to /container_files/public_html/doc/index.html. NOTE: the vendor’s position is that Apps/Sandcastle/standalone.html is part of the CesiumGS/cesium GitHub repository, but is demo code that is not part of the CesiumJS JavaScript library product.Show less
CVE-2023-47660
1Wpwham
1Product Visibility By Country For Woocommerce
Jun 17, 2026
Nov 14, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Wham Product Visibility by Country for WooCommerce plugin <= 1.4.9 versions.
CVE-2023-47659
1Lava Code
1Lava Directory Manager
Jun 17, 2026
Nov 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34 versions.
CVE-2023-6128
1Salesagility
1Suitecrm
Jun 17, 2026
Nov 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.
CVE-2023-46099
1Siemens
1Simatic Pcs Neo
Jun 17, 2026
Nov 14, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). There is a stored cross-site scripting vulnerability in the Administration Console of the affected product, that could allow an attacker with...Show more
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). There is a stored cross-site scripting vulnerability in the Administration Console of the affected product, that could allow an attacker with high privileges to inject Javascript code into the application that is later executed by another legitimate user.Show less