CWE-79: Cross-site Scripting
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Also known as Improper Neutralization of Input During Web Page Generation, XSS, HTML Injection.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- payloadcms payloadPayload: Bypassed sanitization of user uploaded SVGs8.7 High
- getformwork formworkgetformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting5.1 Medium
- microsoft simplechatSimpleChat: Stored XSS via group document filename in inline onclick handler8.7 High
- opentext content managementCross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management5.3 Medium
- akıllı ticaret software technologies ltd. co. e-commerce packReflected XSS in Akıllı Ticaret's E-Commerce Pack6.1 Medium
- brandtoss wp mailsterWordPress WP Mailster plugin <= 1.9.0.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- epiphyt form blockWordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- nexcess givewpWordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- thimpress learnpressWordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability7.1 High
- picuWordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- syed balkhi charitableWordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- fluent forms free vs pro forms pro add on pack, techjewel fluent forms pro add on pack +1 moreWordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability7.1 High
- wp legal pages cookie notice for gdpr, ccpa & eprivacy consentWordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- wpgenie woocommerce simple auctionsWordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability7.1 High
- bplugins video background block – use video as background in the section.WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- social rocket rocket, socialrocket social rocket +1 moreWordPress Social Rocket plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- aman cf7 views – complete entry management for contact form 7WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- plugin devs blog, posts and category filter for elementorWordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- e4j s.r.l. vikrentcarWordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- shamim hasan front end pmWordPress Front End PM plugin <= 11.4.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- dan rossiter document galleryWordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- youzifyWordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- themeansar ansar import – one click starter sites – for elementor & themesWordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- repute info systems arformsWordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- midtrans midtrans-woocommerceWordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- wedevs storegrowth: smart sales booster for woocommerce | bogo, upsells, direct checkout, quick view, side cartWordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- thememove edumallWordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bestweblayout contact form to db by bestwebsoftWordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- code4life database for cf7WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- saravana kumar k wc fields factoryWordPress WC Fields Factory plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- king-theme lumise product designer, lumise product designer +1 moreWordPress Lumise Product Designer plugin < 2.1.4.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- veppa http requests managerWordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerability7.1 High
- vibethemes wplmsWordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mapster wp mapsWordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- n-media frontend file managerWordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- fantastic plugins sumo affiliates proWordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- edgarrojas smart formsWordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability7.1 High
- wedevs wp user frontend proWordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability7.1 High
- colabrio ohio extraWordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- daftplug progressify - progressive web app (pwa)WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- joomunited wp media folderWordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- campcodes simple student information systemSourceCodester Simple Student Information System Profile Field register.php cross site scripting5.3 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- campcodes simple student information systemSourceCodester Simple Student Information System searchresults.php clean cross site scripting5.1 Medium
- payflex payment gateway, tomlister payflex payment gateway +1 moreWordPress Payflex Payment Gateway plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- saadiqbal post smtp – complete email delivery and smtp solution with email logs, alerts, backup smtp & mobile appPost SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)7.2 High
- imgproxyimgproxy SVG svg.go sanitizeElement cross site scripting5.3 Medium
- creative interactive media real 3d flipbookWordPress Real 3D FlipBook plugin <= 5.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- sourcecodester drug recommendation systemSourceCodester Drug Recommendation System add_drug.php cross site scripting5.3 Medium
- Show moreLoading…