← Back
CWE-79

46,286 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (46,286)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-9296
1Never5
1Download Monitor
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
CVE-2015-9295
1Bestwebsoft
1Contact Form
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The contact-form-plugin plugin before 3.96 for WordPress has XSS.
CVE-2015-9294
1Tipsandtricks Hq
1All In One Wp Security & Firewall
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances.
CVE-2015-9293
1Tipsandtricks Hq
1All In One Wp Security & Firewall
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature.
CVE-2013-7475
1Bestwebsoft
1Contact Form
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The contact-form-plugin plugin before 3.52 for WordPress has XSS.
CVE-2012-6713
1Wp Jobmanager
1Job Manager
Nov 21, 2024
Aug 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.
CVE-2019-14987
1Schben
1Framework
Jun 17, 2026
Aug 13, 2019
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Adive Framework through 2.0.7 is affected by XSS in the Create New Table and Create New Navigation Link functions.
CVE-2019-14976
1Icmsdev
1Icms
Jun 17, 2026
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.
CVE-2019-14967
1Frappe
1Frappe
Jun 17, 2026
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.
CVE-2019-14947
1Ultimatemember
1Ultimate Member
Jun 17, 2026
Aug 12, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.
CVE-2019-14946
1Ultimatemember
1Ultimate Member
Jun 17, 2026
Aug 12, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations.
CVE-2019-14945
1Ultimatemember
1Ultimate Member
Jun 17, 2026
Aug 12, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The ultimate-member plugin before 2.0.54 for WordPress has XSS.
CVE-2018-20966
1Booster
1Booster For Woocommerce
Nov 21, 2024
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature.
CVE-2018-20965
1Ultimatemember
1Ultimate Member
Nov 21, 2024
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The ultimate-member plugin before 2.0.4 for WordPress has XSS.
CVE-2017-18505
1Bestwebsoft
1Twitter Button
Nov 21, 2024
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The twitter-plugin plugin before 2.55 for WordPress has XSS.
CVE-2017-18503
1Wpdeveloper
1Twitter Cards Meta
Nov 21, 2024
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.
CVE-2017-18502
1Bestwebsoft
1Subscriber
Nov 21, 2024
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.
CVE-2017-18501
1Bestwebsoft
1Social Login
Nov 21, 2024
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.
CVE-2017-18500
1Bestwebsoft
1Social Buttons Pack
Nov 21, 2024
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.
CVE-2017-18499
1Simple Membership Plugin
1Simple Membership
Nov 21, 2024
Aug 12, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The simple-membership plugin before 3.5.7 for WordPress has XSS.