← Back
CWE-79

46,286 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (46,286)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20963
1Codepeople
1Contact Form Email
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.
CVE-2017-18507
13cx
1Live Chat
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.
CVE-2017-18498
1Presstigers
1Simple Job Board
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.
CVE-2017-18497
1W3eden
1Live Forms
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The liveforms plugin before 3.4.0 for WordPress has XSS.
CVE-2017-18496
1Bestwebsoft
1Htaccess
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.
CVE-2017-18495
1Mediaburst
1Gravity Forms
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.
CVE-2017-18494
1Bestwebsoft
1Custom Search
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.
CVE-2017-18493
1Bestwebsoft
1Custom Admin Page
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
CVE-2017-18492
1Bestwebsoft
1Contact Form To Db
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
CVE-2017-18491
1Bestwebsoft
1Contact Form
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
CVE-2017-18490
1Bestwebsoft
1Contact Form Multi
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.
CVE-2017-18489
1Mediaburst
1Contact Form 7 Clockwork Sms
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.
CVE-2016-10871
1Ibericode
1Mailchimp For Wordpress
Jan 27, 2026
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.
CVE-2016-10870
1Gtranslate
1Google Language Translator
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The google-language-translator plugin before 5.0.06 for WordPress has XSS.
CVE-2016-10869
1Bestwebsoft
1Contact Form
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.
CVE-2016-10868
1Tipsandtricks Hq
1All In One Wp Security & Firewall
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages.
CVE-2015-9302
1Simple Fields Project
1Simple Fields
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The simple-fields plugin before 1.4.11 for WordPress has XSS.
CVE-2015-9300
1Pixelite
1Events Manager
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.
CVE-2015-9299
1Pixelite
1Events Manager
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
CVE-2015-9297
1Pixelite
1Events Manager
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The events-manager plugin before 5.6 for WordPress has XSS.