Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

XSS

This page lists 3380 vulnerabilities in this category.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Portfolio by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (2.27)
-
CWE-79
High
WordPress Plugin Post video players, slideshow albums, photo galleries and music/podcast playlist Cross-Site Scripting (1.136)
-
CWE-79
High
WordPress Plugin Google Captcha (reCAPTCHA) by BestWebSoft Cross-Site Scripting (1.05)
-
CWE-79
High
WordPress Plugin Sucuri Security-Auditing, Malware Scanner and Security Hardening Cross-Site Scripting (1.7.15)
-
CWE-79
High
WordPress Plugin WP Keyword Link Multiple Cross-Site Scripting Vulnerabilities (1.7)
-
CWE-79
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (6.0.21)
-
CWE-79
High
WordPress Plugin User Role by BestWebSoft Cross-Site Scripting (1.4.1)
-
CWE-79
High
WordPress Plugin Twitter Button by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (2.36)
-
CWE-79
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.5.2)
CVE-2014-6444
CWE-79
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.7.5)
-
CWE-79
High
WordPress Plugin SoundCloud Is Gold Cross-Site Scripting (2.3.1)
-
CWE-79
High
WordPress Plugin Quotes and Tips by BestWebSoft Cross-Site Scripting (1.19)
-
CWE-79
High
WordPress Plugin Social Share Button Cross-Site Scripting (2.1)
-
CWE-79
High
WordPress Plugin Social Essentials-Social Stats and Sharing Buttons Cross-Site Scripting (1.3.1)
-
CWE-79
High
WordPress Plugin Smart Slider 2 Multiple Cross-Site Scripting Vulnerabilities (2.3.11)
-
CWE-79
High
WordPress Plugin Simple Fields Cross-Site Scripting (1.4.10)
-
CWE-79
High
WordPress Plugin Role Scoper Cross-Site Scripting (1.3.64)
-
CWE-79
High
WordPress Plugin Relevant-Related Posts by BestWebSoft Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin Google Maps by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (1.2.1)
-
CWE-79
High
WordPress Plugin Google Sitemap by BestWebSoft Cross-Site Scripting (2.9.1)
-
CWE-79
High
WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Cross-Site Scripting (5.3.14)
CVE-2024-6753
CWE-79
High
WordPress Plugin Google +1 by BestWebSoft Cross-Site Scripting (1.1.6)
-
CWE-79
High
WordPress Plugin Google AdSense by BestWebSoft Cross-Site Scripting (1.29)
-
CWE-79
High
WordPress Plugin Easy Coming Soon Cross-Site Scripting (1.8.1)
-
CWE-79
High
WordPress Plugin Easy Contact Form Solution Cross-Site Scripting (1.6)
CVE-2014-7240
CWE-79
High
WordPress Plugin Email Encoder-Protect Email Addresses Cross-Site Scripting (1.4.1)
-
CWE-79
High
WordPress Plugin Email Users Cross-Site Scripting (4.7.5)
-
CWE-79
High
WordPress Plugin Facebook Button by BestWebSoft Cross-Site Scripting (2.33)
-
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (6.0.3.3)
-
CWE-79
High
WordPress Plugin Donate by BestWebSoft Cross-Site Scripting (2.0.1)
-
CWE-79
High
WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.2.1)
-
CWE-79
High
WordPress Plugin Content text slider on post Cross-Site Scripting (6.8)
-
CWE-79
High
WordPress Plugin Contact Form Integrated With Google Maps Cross-Site Scripting (2.4)
CVE-2014-7238
CWE-79
High
WordPress Plugin Contact Form Manager Multiple Cross-Site Scripting Vulnerabilities (1.4.1)
-
CWE-79
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress Cross-Site Scripting (1.4.0)
-
CWE-79
High
Apache 2.x version older than 2.2.8
CVE-2008-0005
CWE-79
Medium
Apache version older than 1.3.41
CVE-2007-6388
CWE-79
Medium
User controllable tag parameter (DOM-based)
-
CWE-79
Medium
Apache version older than 1.3.39
CVE-2007-3304
CWE-79
Medium
ColdFusion XSS (CVE-2023-44352)
CVE-2023-44352
CWE-79
Medium
XSS on Apache HTTP Server 413 error pages via malformed HTTP method
CVE-2007-6203
CWE-79
Medium
Nginx Redirect Header Injection
-
CWE-93
Medium
Odoo XSS (CVE-2023-1434)
CVE-2023-1434
CWE-79
Medium
Zimbra Collaboration XSS (CVE-2022-27926)
CVE-2022-27926
CWE-79
Medium
Apache 2.x version older than 2.2.6
CVE-2007-3847
CWE-20
Medium
Apache 2.x version older than 2.0.63
CVE-2008-0005
CWE-79
Medium
Apache 2.x version older than 2.0.61
CVE-2007-3847
CWE-701
Medium
WSO2 Management Console XSS (CVE-2022-29548)
CVE-2022-29548
CWE-79
Medium
BeyondTrust Secure Remote Access Base XSS (CVE-2021-31589)
CVE-2021-31589
CWE-79
Medium
User controllable tag parameter
-
CWE-79
Medium
LISTSERV XSS (CVE-2022-39195)
CVE-2022-39195
CWE-79
Medium
cPanel XSS (CVE-2023-29489)
CVE-2023-29489
CWE-79
Medium
SAP NW KW XSS vulnerability (CVE-2021-42063)
CVE-2021-42063
CWE-79
Medium
Keycloak clients-registrations XSS (CVE-2021-20323)
CVE-2021-20323
CWE-79
Medium
Cross Site Scripting (globalmetadata) (CMS Made Simple)
CVE-2017-6556
CWE-79
Medium
Apache Tomcat version older than 6.0.18
CVE-2008-2370
CWE-79
Medium
Apache Tomcat version older than 6.0.14
CVE-2007-3386
CWE-79
Medium
Apache Tomcat version older than 6.0.11
CVE-2007-1355
CWE-79
Medium
Apache Tomcat version older than 5.5.27
CVE-2008-2370
CWE-22
Medium
Apache Tomcat version older than 5.5.25
CVE-2007-3386
CWE-79
Medium
Apache Tomcat version older than 4.1.39
CVE-2008-2370
CWE-22
Medium
Apache Tomcat version older than 4.1.37
CVE-2007-5461
CWE-79
Medium
ServiceNow logout XSS (CVE-2022-38463)
CVE-2022-38463
CWE-79
Medium
Cross Site Scripting (Category Description) (CMS Made Simple)
CVE-2017-6555
CWE-79
Medium
Atlassian Confluence Stored Cross Site Scripting
CVE-2016-6283
-
Medium
SharePoint Reflected Cross-Site Scripting (CVE-2017-8514)
CVE-2017-8514
CWE-80
Medium
User controllable charset
-
CWE-20
Medium
Laravel Ignition Reflected Cross-Site Scripting
-
CWE-80
Medium
Bitrix galleries_recalc.php XSS
-
CWE-601
Medium
Cisco Adaptive Security Appliance (ASA) XSS (CVE-2020-3580)
CVE-2020-3580
CWE-79
Medium
HTML Injection
-
CWE-80
Medium
Spring Misconfiguration: HTML Escaping disabled
-
CWE-16
Medium
HTML Attribute Injection
-
CWE-80
Low
Apache 2.x version older than 2.2.10
CVE-2010-2791
CWE-79
Low
Unfiltered header injection in Apache 1.3.34/2.0.57/2.2.1
CVE-2006-3918
CWE-79
Low