CWE-79
48,723 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (48,723)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Eelv Newsletter Project 1Eelv Newsletter Nov 21, 2024 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book. |
1Marvinlabs 1Wp Customer Area Nov 21, 2024 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages. |
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues. |
1Optiontree Project 1Optiontree Nov 21, 2024 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request. |
The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues. |
1Optiontree Project 1Optiontree Nov 21, 2024 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg. |
1Greg's High Performance Seo Project 1Greg's High Performance Seo Nov 21, 2024 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser. |
1Mythemeshop 1My Wp Translate Nov 21, 2024 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The my-wp-translate plugin before 1.0.4 for WordPress has XSS. |
The wp-all-import plugin before 3.4.6 for WordPress has XSS. |
The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php. |
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues. |
1Joomunited 1Wp Latest Posts Nov 21, 2024 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The wp-latest-posts plugin before 3.7.5 for WordPress has XSS. |
1Crayon Syntax Highlighter Project 1Crayon Syntax Highlighter Nov 21, 2024 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests. |
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS. |
1Getawesomesupport 1Awesome Support Nov 21, 2024 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages. |
1Oldstreetsolutions 1Live Input Macros Jun 17, 2026 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie. |
1Yofla 1360 Product Rotation Jun 17, 2026 Aug 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS. |
1Open Xchange 1Open Xchange Appsuite Jun 17, 2026 Aug 20, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 OX App Suite 7.10.0 to 7.10.2 allows XSS. |
Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb. |
FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead to cookie stealing and other malicious actions. |