CWE-79
48,721 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (48,721)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Easy Pdf Restaurant Menu Upload Project 1Easy Pdf Restaurant Menu Upload Jun 17, 2026 Aug 30, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS. |
The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789. |
The webp-express plugin before 0.14.8 for WordPress has stored XSS. |
1Bootstrapped 1Wp Ultimate Recipe Jun 17, 2026 Aug 30, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS. |
1Simple Mail Address Encoder Project 1Simple Mail Address Encoder Jun 17, 2026 Aug 30, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The simple-mail-address-encoder plugin before 1.7 for WordPress has reflected XSS. |
The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS. |
1Greentreelabs 1Gallery Photoblocks Jun 17, 2026 Aug 30, 2019 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS. |
1Onesignal 1Onesignal Free Web Push Notifications Jun 17, 2026 Aug 30, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter. |
1Realestateconnected 1Easy Property Listings Jun 17, 2026 Aug 30, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The easy-property-listings plugin before 3.4 for WordPress has XSS. |
1Wpexpertdeveloper 1Wp Private Content Plus Jun 17, 2026 Aug 30, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_ functions. |
Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side scripts into...Show more |
1Broadcom 2Advanced Secure Gateway Symantec ProxysgNov 21, 2024 Aug 30, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. A stored cross-site scripting (XSS) vulnerability in the WebFTP mode allows...Show more |
Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML. |
Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML. |
Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML. |
In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS. |
1Getwooplugins 1Additional Variation Images For Woocommerce Jun 17, 2026 Aug 29, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS. |
WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name. |
The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_email= XSS. |
2Androvideo Geovision3Gv Vd8700 Firmware Gv Vr360 FirmwareVd 1 FirmwareJun 17, 2026 Aug 29, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not es...Show more |