← Back
CWE-79

46,989 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (46,989)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-37686
1Phpgurukul
1Online Nurse Hiring System
Jul 9, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Nurse Page in the Admin portal.
CVE-2023-37685
1Phpgurukul
1Online Nurse Hiring System
Jul 9, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin portal.
CVE-2023-37684
1Phpgurukul
1Online Nurse Hiring System
Jul 9, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Admin portal.
CVE-2023-37683
1Phpgurukul
1Online Nurse Hiring System
Jul 9, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Profile Page of the Admin.
CVE-2023-27627
1Eggemplo
1Woocommerce Email Report
Jun 17, 2026
Aug 8, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in eggemplo Woocommerce Email Report plugin <= 2.4 versions.
CVE-2023-27415
1Themeqx
1Letterpress
Jun 17, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themeqx LetterPress plugin <= 1.1.2 versions.
CVE-2023-25459
1Postsnippets
1Post Snippets
Jun 17, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Postsnippets Post Snippets plugin <= 4.0.2 versions.
CVE-2023-25063
1Anadnet
1Quick Page/post Redirect Plugin
Jun 17, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anadnet Quick Page/Post Redirect Plugin plugin <= 5.2.3 versions.
CVE-2023-24413
1I13websolution
1Wordpress Vertical Image Slider
Jun 17, 2026
Aug 8, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress vertical image slider plugin <= 1.2.16 versions.
CVE-2023-24409
1I13websolution
1Wp Responsive Tabs Horizontal Vertical And Accordion Tabs
Jun 17, 2026
Aug 8, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs plugin <= 1.1.15 versions.
CVE-2023-23880
1Monsterinsights
1Exactmetrics
Jun 17, 2026
Aug 8, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExactMetrics plugin <= 7.14.1 versions.
CVE-2023-23877
1Bkmacdaddy
1Pinterest Rss Widget
Jun 17, 2026
Aug 8, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in bkmacdaddy designs Pinterest RSS Widget plugin <= 2.3.1 versions.
CVE-2023-23829
1Pierre Jehan
1Owl Carousel
Jun 17, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pierre JEHAN Owl Carousel plugin <= 0.5.3 versions.
CVE-2022-45821
1Nootheme
1Noo Timetable
Jun 17, 2026
Aug 8, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in NooTheme Noo Timetable plugin <= 2.1.3 versions.
CVE-2023-4203
1Advantech
3Eki 1521 Firmware
Eki 1522 FirmwareEki 1524 Firmware
Jun 17, 2026
Aug 8, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.
CVE-2023-4202
1Advantech
3Eki 1521 Firmware
Eki 1522 FirmwareEki 1524 Firmware
Jun 17, 2026
Aug 8, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the web-interface.
CVE-2023-36692
1Wp Cirrus Project
1Wp Cirrus
Jun 17, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christian Kramer & Hendrik Thole WP-Cirrus plugin <= 0.6.11 versions.
CVE-2023-32503
1Gtmetrix
1Gtmetrix
Jun 17, 2026
Aug 8, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.6 versions.
CVE-2023-29099
1Elegantthemes
1Divi
Jun 17, 2026
Aug 8, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Elegant themes Divi theme <= 4.20.2 versions.
CVE-2023-27422
1Nsthemes
1Ns Coupon To Become Customer
Jun 17, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes NS Coupon To Become Customer plugin <= 1.2.2 versions.