CWE-79: Cross-site Scripting
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Also known as Improper Neutralization of Input During Web Page Generation, XSS, HTML Injection.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- cairo-dock glx-dockCairo-dock Glx-Dock Query Parameter ww_page.php cross site scripting5.3 Medium
- dassault systèmes tuleap enterprise editionStored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.58.7 High
- dassault systèmes tuleap enterprise editionStored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.58.7 High
- dassault systèmes tuleap enterprise editionStored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.58.7 High
- ad inserter inserter, igor funa ad inserter +1 moreWordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crocoblock jetmenuWordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dlx plugins custom query blocksWordPress Custom Query Blocks plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- No product listedidcCMS member_deal.php cross site scripting5.1 Medium
- otrs ag otrsStored XSS in external pages4.8 Medium
- unknown hirezootWP Job Openings < 4.0.0 - Admin+ Stored XSS3.5 Low
- y project ruoyiy_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting5.1 Medium
- ovidijusparsiunas deep chatDeep Chat through 2.5.1 XSS via Markdown Link Validation Bypass2.1 Low
- cheshire-cat-ai coreCheshire Cat AI core through 2.0.23 Stored XSS via uploads plugin5.1 Medium
- e2b-dev open-computer-useopen-computer-use through commit 610bac8 Stored XSS via log.html Session Log2.3 Low
- instantsoft icms2InstantSoft icms2 Private Message index.tpl.php index cross site scripting5.1 Medium
- piotnetdotcom piotnet formsPiotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload8.8 High
- markjaquith subscribe to commentsSubscribe to Comments < 2.3.3 - Reflected XSS via 'ref' Parameter7.1 High
- unknown keyword collectorKeyWord Collector <= 1.4 - Unauthenticated Stored XSS and Settings Update via WPKeyWordSettings8.8 High
- unknown topcontentTopcontent <= 1.2.1 - Unauthenticated Stored XSS via Content Webhook8.8 High
- unknown smugmug embedSmugMug Embed <= 3.13 - Unauthenticated Stored XSS via saveSelectedAlbums8.8 High
- unknown buddypress instant chatBuddyPress Instant Chat <= 1.6 - Unauthenticated Stored XSS via Chat Message8.8 High
- unknown adwised web push notificationAdwised Web Push Notification <= 2.5.7 - Unauthenticated Stored XSS via Secret Key Type Juggling8.8 High
- unknown adwised web push notificationAdwised Web Push Notification <= 2.5.7 - Subscriber+ Stored XSS via Pop-up Settings8.0 High
- unknown web vitals trackingWeb Vitals Tracking <= 5.4.2 - Unauthenticated Stored XSS via Tracking Beacon Metric Name8.8 High
- unknown hootboardHootBoard <= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST Endpoint8.8 High
- unknown click5 crm add-on to contact form 7click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Stored XSS via post_notifications8.8 High
- unknown click5 crm add-on to gravity formsclick5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications8.8 High
- unknown click5 crm add-on to wpformsclick5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications8.8 High
- unknown click5 crm add-on to ninja formsclick5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Stored XSS via post_notifications8.8 High
- robosoft robo galleryRobo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings6.8 Medium
- robosoft robo galleryRobo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label6.8 Medium
- robosoft robo galleryRobo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text6.8 Medium
- robosoft robo galleryRobo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect Meta6.8 Medium
- saad iqbal post snippetsPost Snippets <= 4.2.4 - Contributor+ Stored XSS via Snippet Variable6.8 Medium
- scimone ignazio prenotazioniPrenotazioni <= 1.7.5 - Unauthenticated Stored XSS via Settings Update8.8 High
- ancorathemes kids planetWordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- keen it solutions educavoWordPress Educavo theme <= 3.4.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- designthemes lmsWordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- dmitry v. barcode scanner with inventory & order managerWordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- kutethemes kuteshopWordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kutethemes biolifeWordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kutethemes techoneWordPress TechOne theme <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kutethemes armaniaWordPress Armania theme <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- an-themes pin wpWordPress Pin WP theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bracketweb ambedWordPress Ambed theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bplugins document embedderWordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- bplugins before after image comparison – image comparison for wpWordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability7.1 High
- bplugins team section blockWordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- 10web photo gallery by 10webWordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…