CWE-79
High likelihoodImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
45,771 vulnerabilities with CWE-79
CVE-2026-57383
HIGH
WordPress JobSearch plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57382
HIGH
WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57381
HIGH
WordPress PropertyHive plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57380
HIGH
WordPress Extensions for Leaflet Map plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57379
HIGH
WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57376
HIGH
WordPress ElementInvader Addons for Elementor plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57369
HIGH
WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57368
HIGH
WordPress Jobmonster theme <= 4.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57365
MEDIUM
WordPress reCAPTCHA (v2 & v3) for Asgaros Forum plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-57363
HIGH
WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57829
MEDIUM
Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7
CVSS 6.1
CVE-2026-15532
LOW
SourceCodester Online Book Store System User Management cross site scripting
CVSS 2.4
CVE-2026-15552
MEDIUM
Ragic｜Enterprise Cloud Database - Stored Cross-Site Scripting
CVSS 6.1
CVE-2026-15505
LOW
vnotex vnote YAML Frontmatter markdownit.js cross site scripting
CVSS 3.5
CVE-2026-61876
HIGH
LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting
CVSS 8.8
CVE-2026-61875
HIGH
luci-app-upnp Stored XSS via UPnP Port Mapping Description
CVSS 8.8
CVE-2026-15493
LOW
Akpali9 Attendance-Management-System absent.php cross site scripting
CVSS 3.5
CVE-2026-15492
MEDIUM
igweze wizgrade studentConductManager.php cross site scripting
CVSS 4.3
CVE-2026-6939
HIGH
CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Stored Cross-Site Scripting via 'approval_code' Parameter
CVSS 7.2
CVE-2026-1382
MEDIUM
fresh Podcaster <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'freshpodcaster' Shortcode Attributes
CVSS 6.4
CVE-2026-15010
MEDIUM
bbp style pack <= 6.4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Topic Form Additional Fields
CVSS 6.4
CVE-2026-12126
MEDIUM
WCFM Marketplace <= 3.7.3 - Authenticated (Vendor+) Stored Cross-Site Scripting via Attachment 'post_title'
CVSS 6.4
CVE-2026-11898
MEDIUM
White Label CMS <= 2.7.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import Settings
CVSS 4.4
CVE-2026-11591
MEDIUM
Widgets for Google Reviews <= 13.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fomo-title' and 'fomo-text' Parameters
CVSS 4.4
CVE-2026-13378
HIGH
Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field
CVSS 7.2
Details
Vulnerabilities
45,771
Exploit Likelihood
High