CWE-79
49,093 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (49,093)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions. |
Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions. |
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions. |
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions. |
Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions. |
Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions. |
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions. |
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions. |
Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions. |
Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions. |
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions. |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS.
This issue affects Hubbub Lite: from n/a through 1.36.3. |
Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic <= 1.16.3 versions. |
Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions. |