CWE-79
49,195 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (49,195)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows Reflected XSS.This issue affects weMail: from n/a through 2.1.2. |
Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions. |
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions. |
Subscriber Cross Site Scripting (XSS) in SureCart <= 4.2.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions. |
Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions. |
Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions. |
Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions. |
Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions. |
Contributor Cross Site Scripting (XSS) in BNE Testimonials <= 2.0.8 versions. |
Contributor Cross Site Scripting (XSS) in Image Carousel <= 1.0.0.41 versions. |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor allows Stored XSS. This issue affects Exclusive Addons Elementor: from n/a th...Show more |
A vulnerability in jupyter/nbconvert versions <= 7.17.0 allows for Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports. The `data_mermaid` block in `share/templates/lab/base.html.j2` rend...Show more |