CWE-79
High likelihoodImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
45,771 vulnerabilities with CWE-79
CVE-2026-58411
HIGH
ChurchCRM has Reflected Cross-Site Scripting (XSS) via unsanitized request parameter names and values
CVE-2026-15596
MEDIUM
SourceCodester Class and Exam Timetabling System subject.php cross site scripting
CVSS 4.3
CVE-2026-15595
MEDIUM
SourceCodester Class and Exam Timetabling System forsubject.php cross site scripting
CVSS 4.3
CVE-2026-12536
MEDIUM
Avada Builder <= 3.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Title
CVSS 6.4
CVE-2026-58228
MEDIUM
Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>
CVE-2026-49971
MEDIUM
Laravel-Mediable < 7.0.0 Stored XSS via SVG File Upload
CVSS 6.1
CVE-2026-61504
MEDIUM
Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web Listing
CVSS 5.4
CVE-2026-61501
MEDIUM
Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer
CVSS 6.1
CVE-2026-4765
MEDIUM
Stored Cross-Site Scripting (XSS) in Tallos Chat by RD Station Conversas
CVE-2026-59516
HIGH
WordPress ICS Calendar plugin <= 12.1.1 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57816
HIGH
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57814
HIGH
WordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57783
MEDIUM
WordPress Speaker plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-57780
MEDIUM
WordPress Envision Page Builder plugin <= 0.22 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-57745
HIGH
WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57741
HIGH
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57734
HIGH
WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57733
HIGH
WordPress tagDiv Cloud Library plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57732
HIGH
WordPress tagDiv Opt-In Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57728
HIGH
WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57725
HIGH
WordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57718
HIGH
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57715
HIGH
WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57712
HIGH
WordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57711
MEDIUM
WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
Details
Vulnerabilities
45,771
Exploit Likelihood
High