Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

XSS

This page lists 3366 vulnerabilities in this category.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WordPress Download Manager 'cid' Parameter Cross-Site Scripting (2.2.2)
-
CWE-79
High
WordPress Plugin WP Easy Gallery 'select_gallery' Parameter Cross-Site Scripting (1.7)
-
CWE-79
High
WordPress Plugin WP-FaceThumb 'pagination_wp_facethumb' Parameter Cross-Site Scripting (0.1)
CVE-2012-2371
CWE-79
High
WordPress Plugin Link Library 'id' Parameter Cross-Site Scripting and SQL Injection Vulnerabilities (5.0.8)
-
CWE-89
High
WordPress Plugin Events Calendar 'ec_management.class.php' Cross-Site Scripting (6.7.11)
-
CWE-79
High
WordPress 4.0.x Same Origin Method Execution (SOME) Vulnerability (4.0 - 4.0.10)
CVE-2016-4566
CWE-79
High
WordPress Plugin Gigya-Social Infrastructure Cross-Site Scripting (1.1.8)
-
CWE-79
High
WordPress Plugin WP Comment Remix SQL Injection and HTML Injection Vulnerabilities (1.4.3)
-
CWE-89
High
WordPress Plugin FireStats Multiple Cross-Site Scripting and Authentication Bypass Vulnerabilities (1.0.2)
-
CWE-287
High
WordPress Plugin Funky Penguin WP-PHPList 'unsubscribeemail' Parameter Cross-Site Scripting (2.10.2)
-
CWE-79
High
WordPress Plugin Subscribe to Comments Multiple Cross-Site Scripting Vulnerabilities (2.0.4)
-
CWE-79
High
WordPress Plugin Trashbin 'mtb_undelete' Parameter Cross-Site Scripting (0.1)
-
CWE-79
High
WordPress Plugin WP-Cumulus 'tagcloud.swf' Cross-Site Scripting (1.22)
CVE-2009-4168
CWE-79
High
WordPress Plugin Google Analytics Dashboard Plugin for WordPress by MonsterInsights 404 Error Page Cross-Site Scripting (3.2.4)
-
CWE-79
High
WordPress Plugin Calendar Multiple Cross-Site Scripting Vulnerabilities (1.2.1)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'xml/media-rss.php' Cross-Site Scripting (1.5.1)
CVE-2010-1186
CWE-79
High
WordPress Plugin Cimy Counter HTTP Response Splitting and Cross-Site Scripting Vulnerabilities (0.9.4)
-
CWE-113
High
WordPress Plugin WP-UserOnline URL HTML Injection (2.62)
-
CWE-79
High
WordPress Plugin Search Unleashed 'Log' Function HTML Injection (0.2.10)
-
CWE-79
High
WordPress Plugin Events Manager Extended Multiple HTML Injection Vulnerabilities (3.1.2)
-
CWE-79
High
WordPress Plugin cformsII 'lib_ajax.php' Multiple Cross-Site Scripting Vulnerabilities (13.1)
CVE-2010-3977
CWE-79
High
WordPress Plugin FeedList 'handler_image.php' Cross-Site Scripting (2.61.01)
CVE-2010-4637
CWE-79
High
WordPress Plugin Register Plus 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities (3.5.1)
CVE-2010-4402
CWE-79
High
WordPress Plugin Vodpod Video Gallery 'gid' Parameter Cross-Site Scripting (3.1.5)
CVE-2010-4875
CWE-79
High
WordPress Plugin WP Survey And Quiz Tool 'action' Parameter Cross-Site Scripting (1.2.1)
CVE-2010-4630
CWE-79
High
WordPress Plugin Accept Signups 'email' Parameter Cross-Site Scripting (0.1)
-
CWE-79
High
WordPress Plugin Embedded Video 'lembedded-video.php' Cross-Site Scripting (4.1)
CVE-2010-4277
CWE-79
High
WordPress Plugin Processing Embed 'pluginurl' Parameter Cross-Site Scripting (0.5)
CVE-2010-4747
CWE-79
High
WordPress Plugin Register Plus Redux 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities (3.6.1)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'nggallery-manage-gallery' HTML Injection (0.96)
CVE-2008-7175
CWE-79
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (0.9.2)
-
CWE-79
High
WordPress Plugin WP Safe Search 'v1' Parameter Cross-Site Scripting (0.7)
CVE-2010-4518
CWE-79
High
WordPress 4.4.x Same Origin Method Execution (SOME) Vulnerability (4.4 - 4.4.2)
CVE-2016-4566
CWE-79
High
WordPress 4.1.x Cross-Site Scripting Vulnerability (4.1 - 4.1.8)
CVE-2016-1564
CWE-79
High
WordPress 4.1.x Same Origin Method Execution (SOME) Vulnerability (4.1 - 4.1.10)
CVE-2016-4566
CWE-79
High
WordPress 4.2.x Cross-Site Scripting Vulnerability (4.2 - 4.2.7)
CVE-2016-4567
CWE-79
High
WordPress 4.2.x Cross-Site Scripting Vulnerability (4.2 - 4.2.5)
CVE-2016-1564
CWE-79
High
WordPress 4.2.x Same Origin Method Execution (SOME) Vulnerability (4.2 - 4.2.7)
CVE-2016-4566
CWE-79
High
WordPress 4.3.x Cross-Site Scripting Vulnerability (4.3 - 4.3.1)
CVE-2016-1564
CWE-79
High
WordPress 4.3.x Cross-Site Scripting Vulnerability (4.3 - 4.3.3)
CVE-2016-4567
CWE-79
High
WordPress 4.3.x Same Origin Method Execution (SOME) Vulnerability (4.3 - 4.3.3)
CVE-2016-4566
CWE-79
High
WordPress 4.4 Cross-Site Scripting Vulnerability (4.4)
CVE-2016-1564
CWE-79
High
WordPress 4.4.x Cross-Site Scripting Vulnerability (4.4 - 4.4.2)
CVE-2016-4567
CWE-79
High
WordPress 4.5.x Cross-Site Scripting Vulnerability (4.5 - 4.5.1)
CVE-2016-4567
CWE-79
High
WordPress Plugin WP-FeedStats de HTML Injection (2.3)
CVE-2007-4104
CWE-79
High
WordPress 4.5.x Same Origin Method Execution (SOME) Vulnerability (4.5 - 4.5.1)
CVE-2016-4566
CWE-79
High
WordPress Cross-Site Scripting Vulnerability (0.70 - 3.7.11)
CVE-2016-1564
CWE-79
High
WordPress Same Origin Method Execution (SOME) Vulnerability (0.70 - 3.7.13)
CVE-2016-4566
CWE-79
High
WordPress 6.0.x Cross-Site Scripting (6.0 - 6.0.7)
CVE-2024-4439
CWE-79
High
WordPress 6.1.x Cross-Site Scripting (6.1 - 6.1.5)
CVE-2024-4439
CWE-79
High
WordPress 6.2.x Cross-Site Scripting (6.2 - 6.2.4)
CVE-2024-4439
CWE-79
High
WordPress 6.3.x Cross-Site Scripting (6.3 - 6.3.3)
CVE-2024-4439
CWE-79
High
WordPress 6.4.x Cross-Site Scripting (6.4 - 6.4.3)
CVE-2024-4439
CWE-79
High
WordPress 6.5 Cross-Site Scripting (6.5)
CVE-2024-4439
CWE-79
High
WordPress Plugin Automattic Stats Referer Field HTML Injection (1.0)
-
CWE-79
High
WordPress Plugin Twitter Feed:Embedded Timeline 'url' Parameter Cross-Site Scripting (0.3.1)
CVE-2010-4825
CWE-79
High
WordPress Plugin WPtouch 'wptouch_settings' Parameter Cross-Site Scripting (1.9.20)
CVE-2010-4779
CWE-79
High
WordPress Plugin eShop Multiple Cross-Site Scripting Vulnerabilities (6.2.8)
-
CWE-79
High
WordPress Plugin Ajax Category Dropdown Cross-Site Scripting and SQL Injection Vulnerabilities (0.1.5)
-
CWE-89
High
WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner 'mosmsg' and 'option' Parameters Cross-Site Scripting Vulnerabilities (3.0)
-
CWE-79
High
WordPress Plugin Inline Gallery 'do' Parameter Cross-Site Scripting (0.3.9)
-
CWE-79
High
WordPress Plugin Lazyest Gallery 'image' Parameter Cross-Site Scripting (1.0.28)
-
CWE-79
High
WordPress Plugin Mingle Forum Cross-Site Scripting (1.0.28)
-
CWE-79
High
WordPress Plugin PhotoSmash Galleries 'action' Parameter Cross-Site Scripting (1.0.2)
CVE-2011-5307
CWE-79
High
WordPress Plugin Question and Answer Forum 'title' Variable Cross-Site Scripting (1.2.4)
-
CWE-79
High
WordPress Plugin Rating-Widget:Star Review System Multiple Cross-Site Scripting Vulnerabilities (1.3.1)
-
CWE-79
High
WordPress Plugin SodaHead Polls Multiple Cross-Site Scripting Vulnerabilities (2.0.2)
CVE-2011-5304
CWE-79
High
WordPress Plugin WP-reCAPTCHA HTML Injection and Cross-Site Request Forgery Vulnerabilities (2.9.8.2)
CVE-2011-0759
CWE-352
High
WordPress Plugin AdWizz 'link' Parameter Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Daily Maui Photo Widget Multiple Cross-Site Scripting Vulnerabilities (0.2)
-
CWE-79
High
WordPress Plugin Zotpress 'citation' Parameter Cross-Site Scripting (2.6.1)
-
CWE-79
High
WordPress Plugin Real Estate Website Builder 'ajax_action' Parameter Cross-Site Scripting (0.1.0)
-
CWE-79
High
WordPress Plugin Sermon Browser Cross-Site Scripting and SQL Injection Vulnerabilities (0.43)
-
CWE-89
High
WordPress Plugin SocialGrid 'default_services' Parameter Cross-Site Scripting (2.3)
-
CWE-79
High
WordPress Plugin Universal Post Manager Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.9)
-
CWE-89
High