CWE-79
High likelihoodImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
45,759 vulnerabilities with CWE-79
CVE-2026-48530
MEDIUM
GFI Archiver < 15.13 Stored XSS via CategorizationPolicyWizard.aspx
CVSS 5.4
CVE-2026-65914
MEDIUM
DOMPurify before 3.3.2 Mutation XSS via Re-Contextualization
CVSS 6.1
CVE-2026-65912
MEDIUM
DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR
CVSS 6.1
CVE-2026-65911
MEDIUM
DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakage
CVSS 6.1
CVE-2026-65901
MEDIUM
DOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeName
CVSS 6.1
CVE-2026-65900
MEDIUM
DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOM
CVSS 6.1
CVE-2026-65898
HIGH
DOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfig
CVSS 7.2
CVE-2026-65606
CRITICAL
SiYuan < 3.7.2 - XSS to Remote Code Execution via Protocol Handler
CVSS 9.6
CVE-2026-65605
CRITICAL
SiYuan before v3.7.2 Stored XSS to RCE via Attribute View
CVSS 9.6
CVE-2026-65550
MEDIUM
WordPress Tabs plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability
CVSS 5.9
CVE-2026-65538
MEDIUM
WordPress Machete plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability
CVSS 5.9
CVE-2026-65534
MEDIUM
WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability
CVSS 5.9
CVE-2026-65533
MEDIUM
WordPress Smart SEO Tool plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65528
MEDIUM
WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65527
MEDIUM
WordPress LIQUID SPEECH BALLOON plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65522
MEDIUM
WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65519
MEDIUM
WordPress Photo Gallery plugin <= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65518
MEDIUM
WordPress Accept Donations with PayPal & Stripe plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65514
MEDIUM
WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65511
HIGH
WordPress Manual - Documentation, Knowledge Base & Education WordPress Theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-65510
HIGH
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-65503
MEDIUM
WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65492
HIGH
WordPress Dokan Pro plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-65483
MEDIUM
WordPress HashThemes Demo Importer plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
CVSS 5.9
CVE-2026-65482
MEDIUM
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
Details
Vulnerabilities
45,759
Exploit Likelihood
High