CWE-79
49,093 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (49,093)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions. |
Contributor Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions. |
Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions. |
Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions. |
Contributor Cross Site Scripting (XSS) in Appointment Hour Booking <= 1.5.86 versions. |
Unauthenticated Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions. |
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions. |
Contributor Cross Site Scripting (XSS) in Ultimate Store Kit Elementor Addons <= 3.0.5 versions. |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Dokan Pro allows Reflected XSS.
This issue affects Dokan Pro: from n/a before 5.0.7. |
Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions. |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio E...Show more |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS.
This issue affects TheGem: from n/a before 5.12.1.1. |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.3...Show more |
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions. |
Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions. |
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions. |
Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions. |
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking |
Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions. |