CWE-79
High likelihoodImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
45,503 vulnerabilities with CWE-79
CVE-2024-33989
HIGH
School Event Management System <1.0 - XSS
CVSS 7.1
CVE-2024-33988
HIGH
janobe School Attendance & Event Management System 1.0 - Cross-Site Scripting via Report Parameters
CVSS 7.1
CVE-2024-33987
HIGH
School Attendance Monitoring System and School Event Management System 1.0 - Cross-Site Scripting via Report Parameters
CVSS 7.1
CVE-2024-33986
HIGH
janobe School Attendance & Event Management System 1.0 - Cross-Site Scripting
CVSS 7.1
CVE-2024-33985
HIGH
School Attendance Monitoring System and School Event Management System 1.0 - Cross-Site Scripting via View Parameter
CVSS 7.1
CVE-2024-33984
HIGH
School Attendance & Event Management System 1.0 - XSS via Attendance/attenddate/YearLevel
CVSS 7.1
CVE-2024-33983
HIGH
janobe School Attendance Monitoring System 1.0 - Cross-Site Scripting via Attendance Parameters
CVSS 7.1
CVE-2024-33982
HIGH
School Attendance & Event Management System 1.0 - XSS via StudentID Parameter
CVSS 7.1
CVE-2024-7317
MEDIUM
Folders <= 3.0.3 - Authenticated Stored XSS via SVG Upload
CVSS 6.4
CVE-2024-33981
HIGH
janobe Credit Card, Debit Card Payment, PayPal 1.0 - Cross-Site Scripting via start Parameter
CVSS 7.1
CVE-2024-33980
HIGH
janobe Credit Card, Debit Card Payment, PayPal 1.0 - Cross-Site Scripting via start Parameter
CVSS 7.1
CVE-2024-33979
HIGH
PayPal, Credit Card & Debit Card Payment 1.0 - XSS
CVSS 7.1
CVE-2024-33978
HIGH
E-Negosyo System 1.0 - Cross-Site Scripting via Category Parameter
CVSS 7.1
CVE-2024-33977
HIGH
E-Negosyo System 1.0 - Cross-Site Scripting via View Parameter in Orders Index
CVSS 7.1
CVE-2024-33976
HIGH
E-Negosyo System 1.0 - Cross-Site Scripting via 'id' Parameter
CVSS 7.1
CVE-2024-33975
HIGH
E-Negosyo System 1.0 - Cross-Site Scripting via 'view' Parameter in /admin/products/index.php
CVSS 7.1
CVE-2024-7084
MEDIUM
Ajax Search Lite WordPress Plugin < 4.12.1 - Authenticated Stored Cross-Site Scripting
CVSS 4.8
CVE-2024-7082
MEDIUM
Easy Table of Contents < 2.0.68 - Authenticated Stored Cross-Site Scripting
CVSS 6.1
CVE-2024-6766
MEDIUM
shortcodes_ultimate < 7.2.1 - Stored Cross-Site Scripting via Shortcode Attributes
CVSS 5.4
CVE-2024-6651
MEDIUM
WordPress File Upload <4.24.8 - XSS
CVSS 6.1
CVE-2024-6200
HIGH
HaloITSM < 2.143.61 - Stored Cross-Site Scripting in Ticket Access
CVSS 8.0
CVE-2024-5708
MEDIUM
WPBakery Page Builder <= 7.7 - Authenticated Stored Cross-Site Scripting via Link Parameter
CVSS 6.4
CVE-2024-7008
MEDIUM
calibre < 7.15.0 - Reflected Cross-Site Scripting
CVSS 5.4
CVE-2024-6886
CRITICAL
Gitea 1.22.0 - Stored Cross-Site Scripting
CVE-2024-7485
HIGH
Traffic Manager <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via UserWebStat Page Parameter
CVSS 7.2
Details
Vulnerabilities
45,503
Exploit Likelihood
High