CWE-79
46,768 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (46,768)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions. |
Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions. |
Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions. |
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions. |
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions. |
Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions. |
Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions. |
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions. |
Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions. |
Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions. |
Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions. |
Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions. |
Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions. |
Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions. |