CWE-79: Cross-site Scripting
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Also known as Improper Neutralization of Input During Web Page Generation, XSS, HTML Injection.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- stmcan rt-theme 18 | extensionsWordPress RT-Theme 18 | Extensions plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- acymailing newsletter team smtp newsletterWordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- tagdiv composerWordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tagdiv cloud libraryWordPress tagDiv Cloud Library plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- tagdiv opt-in builderWordPress tagDiv Opt-In Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- ux-themes flatsomeWordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themeum kirkiWordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerability7.1 High
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 moreWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability7.1 High
- wp email newsletter team - fluentcrm fluent crmWordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- unknown wpzoom portfolio, wpzoom portfolio +1 moreWordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerability7.1 High
- psm plugins supportcandyWordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crm perks contact form entriesWordPress Contact Form Entries plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- dokan, inc. dokanWordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- dan rossiter document galleryWordPress Document Gallery plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- ad inserter inserter, spacetime ad inserter +1 moreWordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- eli anti-malware security and brute-force firewallWordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.89 - Cross Site Scripting (XSS) vulnerability5.8 Medium
- basix nex-formsWordPress NEX-Forms plugin <= 9.2.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- kofi mokome message filter for contact form 7WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- villatheme bopo – woocommerce product bundle builderWordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- crm perks formsWordPress CRM Perks Forms plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- netrr author box wp lensWordPress Author Box WP Lens plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- rextheme cart liftWordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability7.1 High
- siteground email marketingWordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- codemenschen gift vouchersWordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- quantumcloud chatbot for ecommerce – woowbotWordPress ChatBot for eCommerce – WoowBot plugin <= 4.6.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aman cf7 views – complete entry management for contact form 7WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- realmag777 active products tables for woocommerceWordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- milan petrovic gd security headersWordPress GD Security Headers plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- wpdesk flexible refund and return order for woocommerceWordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.51 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- proxy & vpn blocker & vpn blockerWordPress Proxy & VPN Blocker plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- webcodingplace real estate manager proWordPress Real Estate Manager Pro plugin <= 12.8.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- flintop free gifts for woocommerceWordPress Free Gifts for WooCommerce plugin <= 13.1.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- tribulant software newslettersWordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability7.1 High
- tangible loops & logicWordPress Loops & Logic plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.44 - Cross Site Scripting (XSS) vulnerability7.1 High
- picuWordPress picu plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- eyecix jobsearchWordPress JobSearch plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability7.1 High
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- property hive propertyhiveWordPress PropertyHive plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- hupe13 extensions for leaflet mapWordPress Extensions for Leaflet Map plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- wppool formychatWordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- element invader elementinvader addons for elementorWordPress ElementInvader Addons for Elementor plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- themifyme themify builderWordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- nootheme jobmonsterWordPress Jobmonster theme <= 4.8.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hitesh chandwani recaptcha (v2 & v3) for asgaros forumWordPress reCAPTCHA (v2 & v3) for Asgaros Forum plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- quantumcloud chatbotWordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- ollyo helix ultimate, joomshaper.com helix ultimate extension for joomla +1 moreJoomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.78.7 High
- sourcecodester online book store systemSourceCodester Online Book Store System User Management cross site scripting4.8 Medium
- ragic enterprise cloud databaseRagic｜Enterprise Cloud Database - Stored Cross-Site Scripting5.3 Medium
- vnotex vnotevnotex vnote YAML Frontmatter markdownit.js cross site scripting5.1 Medium
- Show moreLoading…