CWE-79
45,542 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (45,542)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions. |
Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.7 versions. |
Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions. |
Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions. |
Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions. |
Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions. |
Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions. |
Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. |
Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions. |
Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions. |
Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions. |