CWE-79
49,366 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (49,366)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. |
Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions. |
Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions. |
Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions. |
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions. |
Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5 versions. |
Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Paid Member Subscriptions <= 2.17.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in Social Slider Feed <= 2.3.2 versions. |
Subscriber Cross Site Scripting (XSS) in JupiterX Core <= 4.14.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions. |
Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Contact Form to Any API <= 3.0.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in CformsII <= 15.1.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 4.6.3 versions. |