CWE-79

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug

Cross Site Scripting (XSS) vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary cod

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Due to insufficie

IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerabi

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer.

An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote

Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unau

The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape some parameters before outputting them back i

The Ultimate Video Player For WordPress WordPress plugin before 2.2.3 does not have proper capability check when updati

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary w

The Carousel Slider WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow h

The NPS computy WordPress plugin through 2.7.5 does not sanitise and escape some of its settings, which could allow high

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field an

Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categori

The Social Sharing Plugin WordPress plugin before 3.3.61 does not validate and escape some of its shortcode attributes

The Carousel Slider WordPress plugin before 2.2.10 does not validate and escape some of its Slide options before outputt

A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility

A Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authentic

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stor

Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an

The Alemha watermarker WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could all

The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the

The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress

The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, mak

The SULly WordPress plugin before 4.3.1 does not sanitise and escape a parameter before outputting it back in the page,

The Ditty WordPress plugin before 3.1.43 does not sanitise and escape some of its blocks' settings, which could allow h

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malic

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php.

The Ultimate Classified Listings WordPress plugin before 1.3 does not sanitise and escape a parameter before outputting

Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitr

A reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS v2023 allows attackers

A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier. The

A Stored Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php" of Kashipara Hotel Management Sys

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before

SAP NetWeaver Enterprise Portal is vulnerable to reflected cross site scripting due to insufficient encoding of user-con

A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attac

The Ninja Forms Contact Form plugin for WordPress is vulnerable to Reflected Self-Based Cross-Site Scripting via the 'Re

A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 allows an a

A Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation Management System v1.0 allow

Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.

October 3.6.30 allows an authenticated admin account to upload a PDF file containing malicious JavaScript into the targe

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing vali

The Checkout Field Editor (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site

Mirotalk before commit 9de226 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allow

The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin fo

The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions u

Users who click on a malicious link or visit a website under the control of an attacker can be infected with arbitrary J

The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allo