← Back
CWE-79

48,721 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (48,721)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-18535
1Smokesignal Project
1Smokesignal
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The smokesignal plugin before 1.2.7 for WordPress has XSS.
CVE-2017-18525
1Megamenu
1Max Mega Menu
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The megamenu plugin before 2.4 for WordPress has XSS.
CVE-2017-18516
1Bestwebsoft
1Linkedin
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
CVE-2016-10891
1Pojo
1Activity Log
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The aryo-activity-log plugin before 2.3.3 for WordPress has XSS.
CVE-2016-10890
1Pojo
1Activity Log
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The aryo-activity-log plugin before 2.3.2 for WordPress has XSS.
CVE-2014-10378
1Duplicate Post Project
1Duplicate Post
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The duplicate-post plugin before 2.6 for WordPress has XSS.
CVE-2014-10377
1Cformsii Project
1Cformsii
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php.
CVE-2012-6714
1Count Per Day Project
1Count Per Day
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The count-per-day plugin before 3.2.3 for WordPress has XSS via search words.
CVE-2017-18564
1Bestwebsoft
1Sender
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The sender plugin before 1.2.1 for WordPress has multiple XSS issues.
CVE-2017-18563
1Swimordiesoftware
1Rsvp
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen.
CVE-2016-10912
1Matchboxdesigngroup
1Universal Analytics
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The universal-analytics plugin before 1.3.1 for WordPress has XSS.
CVE-2016-10911
1Cozmoslabs
1Profile Builder
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.
CVE-2016-10910
1Formbuilder Project
1Formbuilder
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The formbuilder plugin before 1.06 for WordPress has multiple XSS issues.
CVE-2015-9328
1Cozmoslabs
1Profile Builder
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The profile-builder plugin before 2.2.5 for WordPress has XSS.
CVE-2015-9327
1Flickr Justified Gallery Project
1Flickr Justified Gallery
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS.
CVE-2014-10380
1Cozmoslabs
1Profile Builder
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.
CVE-2012-6715
1Formbuilder Project
1Formbuilder
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.
CVE-2019-15112
1Wp Slimstat
1Slimstat Analytics
Jun 17, 2026
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The wp-slimstat plugin before 4.8.1 for WordPress has XSS.
CVE-2019-15110
1Wp Front End Profile Project
1Wp Front End Profile
Jun 17, 2026
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS.
CVE-2017-18565
1Bestwebsoft
1Updater
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The updater plugin before 1.35 for WordPress has multiple XSS issues.