CWE-79

The Fleet Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions u

The Squirrels Auto Inventory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all

The MembershipWorks – Membership, Events & Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The WP Delete Post Copies plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all ve

The YouTube Subscribe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versio

The Zweb Social Mobile – Ứng Dụng Nút Gọi Mobile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting i

The StaffList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to

The FitVids for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all ve

The Weekly Planner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions

The Trail Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions u

The TWW Protein Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Header' setting in

The Contact Form 7 with ChatWork plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_token' a

The DebateMaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color options in the plugin s

The SimplyConvert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'simplyconvert_hash' option

The WP Job Portal plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including

The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting

The Custom Post Type UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'label' parameter duri

The Quick Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versi

The WC Builder – WooCommerce Page Builder for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting

A vulnerability has been found in VIWIS LMS 9.11 and classified as problematic. Affected by this vulnerability is an unk

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofi

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this v

Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Proc

A vulnerability classified as problematic has been found in Hyland Alfresco Community Edition and Alfresco Enterprise Ed

A vulnerability was found in Mobotix M15 4.3.4.83 and classified as problematic. This issue affects some unknown process

A vulnerability classified as problematic has been found in needyamin image_gallery 1.0. This affects the function image

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as problematic. This issue affects som

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as problematic. Affected by this vu

A vulnerability was found in Cianet ONU GW24AC up to 20250127. It has been declared as problematic. Affected by this vul

Discourse is an open source platform for community discussion. In affected versions with some combinations of plugins, a

A vulnerability, which was classified as problematic, was found in Animati PACS up to 1.24.12.09.03. This affects an unk

A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknow

A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. This affects an unknown part of

The Maps Plugin using Google Maps for WordPress WordPress plugin before 1.9.4 does not sanitise and escape some of its

The Maps Plugin using Google Maps for WordPress WordPress plugin before 1.9.4 does not sanitise and escape some of its

A vulnerability, which was classified as problematic, has been found in SIAM Industria de Automação e Monitoramento SIAM

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web appl

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some

A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unkno

A vulnerability was found in Tu Yafeng Via Browser up to 5.9.0 on Android. It has been rated as problematic. This issue

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is

A vulnerability was found in Pixsoft Vivaz 6.0.11. It has been classified as problematic. Affected is an unknown functio

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vuln

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerabilit

A vulnerability, which was classified as problematic, has been found in ZZCMS 2025. This issue affects some unknown proc

Cross-Site Scripting (XSS) vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings (2.4G

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. Th

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected i