← Back
CWE-79

48,721 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (48,721)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-18560
1Content Audit Project
1Content Audit
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The content-audit plugin before 1.9.2 for WordPress has XSS.
CVE-2017-18558
1Bestwebsoft
1Testimonials
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.
CVE-2017-18557
1Bestwebsoft
1Google Maps
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.
CVE-2017-18556
1Bestwebsoft
1Google Analytics
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.
CVE-2017-18555
1Mediaburst
1Booking Calendar
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The booking-sms plugin before 1.1.0 for WordPress has XSS.
CVE-2017-18554
1Analytics Tracker Project
1Analytics Tracker
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event.
CVE-2017-18553
1Ad Buttons Project
1Ad Buttons
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The ad-buttons plugin before 2.3.2 for WordPress has XSS.
CVE-2016-10908
1Codepeople
1Booking Calendar Contact Form
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.
CVE-2016-10901
1Gowebsolutions
1Wp Customer Reviews
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.
CVE-2016-10900
1Wpmanage
1Uji Countdown
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The uji-countdown plugin before 2.0.7 for WordPress has XSS.
CVE-2019-15109
1Stellarwp
1The Events Calendar
Jun 17, 2026
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.
CVE-2017-18540
1Deepsoft
1Weblibrarian
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.
CVE-2017-18539
1Deepsoft
1Weblibrarian
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes.
CVE-2017-18538
1Deepsoft
1Weblibrarian
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes.
CVE-2017-18537
1Bestwebsoft
1Visitors Online
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.
CVE-2017-18536
1Fullworksplugins
1Stop User Enumeration
Jan 23, 2026
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.
CVE-2017-18534
1Share On Diaspora Project
1Share On Diaspora
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters.
CVE-2016-10898
1Fabrix
1Total Security
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The total-security plugin before 3.4.1 for WordPress has XSS.
CVE-2016-10897
1Sermon Browser Project
1Sermon Browser
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues.
CVE-2016-10896
1Clogica
1Seo Redirection
Nov 21, 2024
Aug 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The seo-redirection plugin before 4.3 for WordPress has stored XSS.