CWE-79
High likelihoodImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
45,354 vulnerabilities with CWE-79
CVE-2024-56990
MEDIUM
PHPGurukul Hospital Management System 4.0 - XSS
CVSS 4.5
CVE-2024-56998
MEDIUM
PHPGurukul Hospital Management System 4.0 - XSS
CVSS 4.2
CVE-2024-56997
MEDIUM
PHPGurukul Hospital Management System 4.0 - XSS
CVSS 4.2
CVE-2024-49700
HIGH
ARPrice <= 4.1.3 - Reflected Cross-Site Scripting
CVSS 7.1
CVE-2024-49300
HIGH
Hero Mega Menu - Responsive WordPress Menu Plugin < 1.16.5 - Reflected Cross-Site Scripting
CVSS 7.1
CVE-2024-11226
MEDIUM
FireCask Like & Share Button <1.2 - XSS
CVSS 6.4
CVE-2024-13404
MEDIUM
Link Library plugin for WordPress <8 - XSS
CVSS 6.1
CVE-2024-8722
MEDIUM
WP All Import Pro <= 4.9.7 - Authenticated Stored Cross-Site Scripting via SVG File Upload
CVSS 5.5
CVE-2024-13392
MEDIUM
AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated Stored XSS via videowhisper_reviews Shortcode
CVSS 6.4
CVE-2024-13519
MEDIUM
MarketKing - Ultimate WooCommerce Multivendor Marketplace Solution ...
CVSS 4.4
CVE-2024-13517
MEDIUM
Easy Digital Downloads <3.3.2 - XSS
CVSS 4.4
CVE-2024-13433
MEDIUM
WordPress Utilities for MTG <1.4.1 - XSS
CVSS 6.4
CVE-2024-13393
MEDIUM
Video Share VOD - Turnkey Video Site Builder Script <2.6.31 - XSS
CVSS 6.4
CVE-2024-13391
MEDIUM
MicroPayments - Fans Paysite: Paid Creator Subscriptions, Digital A...
CVSS 6.4
CVE-2024-13385
MEDIUM
JSM Screenshot Machine Shortcode <2.3.0 - XSS
CVSS 6.4
CVE-2024-12696
MEDIUM
Picture Gallery <= 1.5.22 - Authenticated Stored XSS via videowhisper_picture_upload_guest Shortcode
CVSS 6.4
CVE-2024-9020
MEDIUM
List category posts < 0.90.3 - Stored Cross-Site Scripting via Shortcode Attributes
CVSS 5.4
CVE-2024-13516
MEDIUM
Kubio AI Page Builder <= 2.3.5 - Unauthenticated Reflected Cross-Site Scripting via Message Parameter
CVSS 6.1
CVE-2024-13515
MEDIUM
Image Source Control Lite - WordPress <2.28.0 - XSS
CVSS 6.1
CVE-2024-57033
MEDIUM
WeGIA < 3.2.0 - Cross-Site Scripting via dados_addInfo Parameter
CVSS 6.1
CVE-2024-57372
MEDIUM
InformationPush master - Cross-Site Scripting via Title, Time, and Msg Parameters
CVSS 6.1
CVE-2024-57370
MEDIUM
Sunnygkp10 Online Exam System - XSS
CVSS 6.1
CVE-2024-57030
HIGH
Wegia < 3.2.0 - Cross-Site Scripting via id Parameter
CVSS 8.1
CVE-2024-26157
MEDIUM
ETIC Telecom Remote Access Server Firmware < 4.5.0 - Reflected Cross-Site Scripting via View Parameter
CVSS 6.1
CVE-2024-26156
MEDIUM
ETIC Telecom Remote Access Server Firmware < 4.5.0 - Reflected Cross-Site Scripting via Method Parameter
CVSS 4.8
Details
Vulnerabilities
45,354
Exploit Likelihood
High