CWE-79
46,293 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (46,293)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
The sender plugin before 1.2.1 for WordPress has multiple XSS issues. |
The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen. |
1Matchboxdesigngroup 1Universal Analytics Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The universal-analytics plugin before 1.3.1 for WordPress has XSS. |
1Cozmoslabs 1Profile Builder Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues. |
1Formbuilder Project 1Formbuilder Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The formbuilder plugin before 1.06 for WordPress has multiple XSS issues. |
The profile-builder plugin before 2.2.5 for WordPress has XSS. |
1Flickr Justified Gallery Project 1Flickr Justified Gallery Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS. |
1Cozmoslabs 1Profile Builder Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms. |
1Formbuilder Project 1Formbuilder Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header. |
1Wp Slimstat 1Slimstat Analytics Jun 17, 2026 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The wp-slimstat plugin before 4.8.1 for WordPress has XSS. |
1Wp Front End Profile Project 1Wp Front End Profile Jun 17, 2026 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS. |
The updater plugin before 1.35 for WordPress has multiple XSS issues. |
1Content Audit Project 1Content Audit Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The content-audit plugin before 1.9.2 for WordPress has XSS. |
The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues. |
The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues. |
1Bestwebsoft 1Google Analytics Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. |
1Mediaburst 1Booking Calendar Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The booking-sms plugin before 1.1.0 for WordPress has XSS. |
1Analytics Tracker Project 1Analytics Tracker Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event. |
1Ad Buttons Project 1Ad Buttons Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The ad-buttons plugin before 2.3.2 for WordPress has XSS. |
1Codepeople 1Booking Calendar Contact Form Nov 21, 2024 Aug 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS. |