CWE-79
46,770 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (46,770)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions. |
Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions. |
Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions. |
Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions. |
Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions. |
Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions. |
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions. |
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions. |
Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions. |
Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions. |
Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 versions. |
Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions. |