CWE-79
48,721 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVEs (48,721)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. |
Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions. |
Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions. |
Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions. |
Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions. |
Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions. |
Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions. |
Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions. |
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions. |
Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions. |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a through 2.6.104. |
Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions. |
Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions. |
Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions. |
Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions. |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from...Show more |
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the...Show more |