Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

XSS

This page lists 3366 vulnerabilities in this category.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin JC Coupon Cross-Site Scripting (2.5)
CVE-2013-1808
CWE-79
High
WordPress Plugin MobileView by ColorLabs & Company Cross-Site Scripting (1.0.7)
CVE-2013-1808
CWE-79
High
WordPress Plugin PayPal Digital Goods powered by Cleeng Cross-Site Scripting (2.2.13)
CVE-2013-1808
CWE-79
High
WordPress Plugin podPress Cross-Site Scripting (8.8.10.13)
CVE-2013-2714
CWE-79
High
WordPress Plugin Simply Poll Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.4.1)
-
CWE-352
High
WordPress Plugin SlideDeck 2 Lite Responsive Content Slider Multiple Cross-Site Scripting Vulnerabilities (2.1.20130228)
CVE-2013-1808
CWE-79
High
WordPress Plugin Snazzy Archives Cross-Site Scripting (1.7.1)
-
CWE-79
High
WordPress Plugin Terillion Reviews Profile Id Cross-Site Scripting (1.1)
CVE-2013-2501
CWE-79
High
WordPress Plugin TheThe Layout Grid Cross-Site Scripting (1.0.0)
CVE-2013-1808
CWE-79
High
WordPress Plugin Tiny URL Cross-Site Scripting (1.3.2)
CVE-2013-1808
CWE-79
High
WordPress Plugin Marekkis Watermark Cross-Site Scripting (0.9.1)
CVE-2013-1758
CWE-79
High
WordPress Plugin Audio Player Cross-Site Scripting (2.0.4.5)
CVE-2013-1464
CWE-79
High
WordPress Plugin VKontakte API Cross-Site Scripting (2.7)
CVE-2009-4168
CWE-79
High
WordPress Plugin Spider Calendar Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.1)
-
CWE-89
High
WordPress Plugin ABC Test 'id' Parameter Cross-Site Scripting (0.1)
-
CWE-79
High
WordPress Plugin AdRotate-Ad manager & AdSense Ads 'title' Parameter Multiple Cross-Site Scripting Vulnerabilities (3.7.3.5)
-
CWE-79
High
WordPress Plugin Answer My Question Multiple Cross-Site Scripting Vulnerabilities (1.1)
-
CWE-79
High
WordPress Plugin Google Analytics Dashboard Plugin for WordPress by MonsterInsights Multiple Cross-Site Scripting Vulnerabilities (4.2.4)
-
CWE-79
High
WordPress Plugin iThemes Security (formerly Better WP Security) Multiple Cross-Site Scripting Vulnerabilities (3.4.3)
-
CWE-79
High
WordPress Plugin MF Gig Calendar 'page_id' Parameter Cross-Site Scripting (0.9.4.1)
CVE-2012-4242
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'Gallery Path' Field Cross-Site Scripting (1.9.5)
-
CWE-79
High
WordPress Plugin Token Manager 'tid' Parameter Multiple Cross-Site Scripting Vulnerabilities (1.0.2)
-
CWE-79
High
WordPress Plugin WP-TopBar Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (4.02)
-
CWE-352
High
WordPress Plugin Slideshow Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities (2.1.12)
-
CWE-200
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (3.3.5)
-
CWE-79
High
WordPress Plugin WP-Table Reloaded Cross-Site Scripting (1.9.3)
CVE-2013-1463
CWE-79
High
WordPress Plugin Carousel slideshow 'swfupload.swf' Cross-Site Scripting (3.10)
CVE-2012-3414
CWE-79
High
WordPress Plugin MailPoet Newsletters (Previous) 'swfupload.swf' Cross-Site Scripting (2.1.6)
CVE-2012-3414
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'swfupload.swf' Cross-Site Scripting (1.9.7)
CVE-2012-3414
CWE-79
High
WordPress Plugin Simple Slider 'New Image' Field Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin SpiderCatalog 's_p_c_t' Parameter Multiple Cross-Site Scripting Vulnerabilities (1.1)
-
CWE-79
High
WordPress Plugin Ultimate TinyMCE 'swfupload.swf' Cross-Site Scripting (3.5)
CVE-2012-3414
CWE-79
High
WordPress Plugin Video Lead Form 'errMsg' Parameter Cross-Site Scripting (0.5)
CVE-2012-6312
CWE-79
High
WordPress Plugin WP eCommerce Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (3.8.9)
-
CWE-89
High
WordPress Plugin Welcart e-Commerce Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.2.1)
CVE-2012-5178
CWE-352
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (2.8.4)
-
CWE-79
High
WordPress Plugin Uploader Cross-Site Scripting and Arbitrary File Upload Vulnerabilities (1.0.4)
CVE-2013-2288
CWE-434
High
WordPress Plugin WP Banners Lite Cross-Site Scripting (1.40)
-
CWE-79
High
WordPress Plugin HK Exif Tags Cross-Site Scripting (1.11)
CVE-2014-100007
CWE-79
High
WordPress Plugin HMS Testimonials Multiple Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (2.0.10)
CVE-2013-4241
CWE-352
High
WordPress Plugin Xorbin Digital Flash Clock Cross-Site Scripting (1.0)
CVE-2013-4693
CWE-79
High
WordPress Plugin Category Grid View Gallery Cross-Site Scripting (2.3.3)
CVE-2013-4117
CWE-79
High
WordPress Plugin Citizen Space Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (0.4.4)
CVE-2013-4625
CWE-79
High
WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (3.5.3)
-
CWE-79
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Multiple Cross-Site Scripting Vulnerabilities (1.30)
CVE-2013-4954
CWE-79
High
WordPress Plugin The Events Calendar Cross-Site Scripting (3.0)
-
CWE-79
High
WordPress Plugin WooCommerce Cross-Site Scripting (2.0.12)
-
CWE-79
High
WordPress Plugin BackWPup Cross-Site Scripting (3.0.12)
CVE-2013-4626
CWE-79
High
WordPress Plugin Comment Extra Fields Multiple Cross-Site Scripting Vulnerabilities (1.7)
-
CWE-79
High
WordPress Plugin Usernoise modal feedback/contact form Cross-Site Scripting (3.7.8)
-
CWE-79
High
WordPress Plugin WP Photo Album Plus Cross-Site Scripting (5.0.10)
-
CWE-79
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Scripting (3.8.3)
-
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.2.2)
-
CWE-79
High
WordPress Plugin BulletProof Security Cross-Site Scripting (.50.9)
-
CWE-79
High
WordPress Plugin Contact Bank-Contact Form Builder for WordPress 'Label' Field Cross-Site Scripting (2.0.19)
CVE-2014-3841
CWE-79
High
WordPress Plugin Contact Form 7 Integrations Multiple Cross-Site Scripting Vulnerabilities (1.3.10)
CVE-2014-6445
CWE-79
High
WordPress Plugin Contact Form DB Multiple Cross-Site Scripting Vulnerabilities (2.8.15)
CVE-2014-7139
CWE-79
High
WordPress Plugin DZS Video Gallery Multiple Cross-Site Scripting Vulnerabilities (All)
CVE-2014-9094
CWE-79
High
WordPress Plugin Easy Forms for Mailchimp Cross-Site Scripting (5.0.6)
CVE-2014-7152
CWE-79
High
WordPress Plugin EWWW Image Optimizer Cross-Site Scripting (2.0.1)
CVE-2014-6243
CWE-79
High
WordPress Plugin Google Calendar Events Cross-Site Scripting (2.0.3.1)
CVE-2014-7138
CWE-79
High
WordPress Plugin Xorbin Analog Flash Clock Cross-Site Scripting (1.0)
CVE-2013-4692
CWE-79
High
WordPress Plugin Video.js-HTML5 Video Player for Wordpress Cross-Site Scripting (3.2.3)
-
CWE-79
High
WordPress Plugin Clone Cross-Site Scripting (2.1.1)
CVE-2013-1808
CWE-79
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.2.1.1)
CVE-2013-2768
CWE-352
High
WordPress Plugin WP FuneralPress Multiple Cross-Site Scripting Vulnerabilities (1.1.6)
CVE-2013-3529
CWE-79
High
WordPress Plugin WP Link To Us Multiple Cross-Site Scripting Vulnerabilities (2.0)
CVE-2013-1808
CWE-79
High
WordPress Plugin WpPygments Multiple Cross-Site Scripting Vulnerabilities (0.3.2)
CVE-2013-1808
CWE-79
High
WordPress Plugin Zendesk Chat Cross-Site Scripting (1.2.5)
CVE-2013-1808
CWE-79
High
WordPress Plugin AJAX Comment Page Cross-Site Scripting (3.25)
-
CWE-79
High
WordPress Plugin Background Music Cross-Site Scripting (1.0)
CVE-2013-1942
CWE-79
High
WordPress Plugin Feedweb Cross-Site Scripting (1.8.8)
CVE-2013-3720
CWE-79
High
WordPress Plugin Haiku minimalist audio player Cross-Site Scripting (1.0.0)
CVE-2013-1942
CWE-79
High
WordPress Plugin Jammer Cross-Site Scripting (0.2)
CVE-2013-1942
CWE-79
High