← Back
CWE-79

46,289 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (46,289)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-18530
1Bestwebsoft
1Rating
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.
CVE-2017-18529
1Bestwebsoft
1Promobar
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.
CVE-2017-18528
1Bestwebsoft
1Pdf & Print
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
CVE-2017-18527
1Bestwebsoft
1Pagination
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
CVE-2017-18526
1Lamp Solutions
1Moreads Se
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The moreads-se plugin before 1.4.7 for WordPress has XSS.
CVE-2017-18524
1Antoineh
1Football Pool
Jul 16, 2025
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.
CVE-2017-18522
1Eelv Newsletter Project
1Eelv Newsletter
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
CVE-2017-18519
1Marvinlabs
1Wp Customer Area
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.
CVE-2017-18518
1Bestwebsoft
1Smtp
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
CVE-2016-10895
1Optiontree Project
1Optiontree
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
CVE-2016-10892
1Kibokolabs
1Chained Quiz
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.
CVE-2015-9320
1Optiontree Project
1Optiontree
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
CVE-2015-9319
1Greg's High Performance Seo Project
1Greg's High Performance Seo
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.
CVE-2017-18568
1Mythemeshop
1My Wp Translate
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The my-wp-translate plugin before 1.0.4 for WordPress has XSS.
CVE-2017-18567
1Soflyy
1Wp All Import
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The wp-all-import plugin before 3.4.6 for WordPress has XSS.
CVE-2017-18520
1Wp Kama
1Democracy Poll
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.
CVE-2017-18517
1Bestwebsoft
1Pinterest
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
CVE-2016-10913
1Joomunited
1Wp Latest Posts
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.
CVE-2016-10893
1Crayon Syntax Highlighter Project
1Crayon Syntax Highlighter
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests.
CVE-2015-9329
1Soflyy
1Wp All Import
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.