Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

XSS

This page lists 3366 vulnerabilities in this category.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Smart Slider 2 Multiple Cross-Site Scripting Vulnerabilities (2.3.11)
-
CWE-79
High
WordPress Plugin Job Board by BestWebSoft Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (6.0.21)
-
CWE-79
High
WordPress Plugin Gallery Master-Responsive Photo Galleries & Albums Cross-Site Scripting (1.0.22)
-
CWE-79
High
WordPress Plugin EWWW Image Optimizer Cloud Cross-Site Scripting (2.0.1)
-
CWE-79
High
WordPress Plugin Commentator Cross-Site Scripting (2.5.2)
-
CWE-79
High
WordPress Plugin WP Widget Cache Cross-Site Scripting (0.26)
-
CWE-79
High
WordPress Plugin WP Page Widget Cross-Site Scripting (2.7)
-
CWE-79
High
WordPress Plugin WP Keyword Link Multiple Cross-Site Scripting Vulnerabilities (1.7)
-
CWE-79
High
WordPress Plugin User Role by BestWebSoft Cross-Site Scripting (1.4.1)
-
CWE-79
High
WordPress Plugin Social Essentials-Social Stats and Sharing Buttons Cross-Site Scripting (1.3.1)
-
CWE-79
High
WordPress Plugin Twitter Button by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (2.36)
-
CWE-79
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.5.2)
CVE-2014-6444
CWE-79
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.7.5)
-
CWE-79
High
WordPress Plugin Sucuri Security-Auditing, Malware Scanner and Security Hardening Cross-Site Scripting (1.7.15)
-
CWE-79
High
WordPress Plugin SoundCloud Is Gold Cross-Site Scripting (2.3.1)
-
CWE-79
High
WordPress Plugin Social Share Button Cross-Site Scripting (2.1)
-
CWE-79
High
WordPress Plugin Manual Image Crop Cross-Site Scripting (1.10)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (2.9.28)
-
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (6.0.3.3)
-
CWE-79
High
WordPress Plugin Google Sitemap by BestWebSoft Cross-Site Scripting (2.9.1)
-
CWE-79
High
WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.2.1)
-
CWE-79
High
WordPress Plugin Google +1 by BestWebSoft Cross-Site Scripting (1.1.6)
-
CWE-79
High
WordPress Plugin Google AdSense by BestWebSoft Cross-Site Scripting (1.29)
-
CWE-79
High
WordPress Plugin Google Captcha (reCAPTCHA) by BestWebSoft Cross-Site Scripting (1.05)
-
CWE-79
High
WordPress Plugin Email Users Cross-Site Scripting (4.7.5)
-
CWE-79
High
WordPress Plugin Google Maps by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (1.2.1)
-
CWE-79
High
WordPress Plugin Facebook Button by BestWebSoft Cross-Site Scripting (2.33)
-
CWE-79
High
WordPress Plugin Easy Contact Form Solution Cross-Site Scripting (1.6)
CVE-2014-7240
CWE-79
High
WordPress Plugin Donate by BestWebSoft Cross-Site Scripting (2.0.1)
-
CWE-79
High
WordPress Plugin Easy Coming Soon Cross-Site Scripting (1.8.1)
-
CWE-79
High
WordPress Plugin iQ Block Country Cross-Site Scripting (1.1.19)
-
CWE-79
High
WordPress Plugin Htaccess by BestWebSoft Cross-Site Scripting (1.4)
-
CWE-79
High
WordPress Plugin Email Encoder-Protect Email Addresses Cross-Site Scripting (1.4.1)
-
CWE-79
High
User controllable tag parameter
-
CWE-79
Medium
Nginx Redirect Header Injection
-
CWE-93
Medium
ColdFusion XSS (CVE-2023-44352)
CVE-2023-44352
CWE-79
Medium
cPanel XSS (CVE-2023-29489)
CVE-2023-29489
CWE-79
Medium
Zimbra Collaboration XSS (CVE-2022-27926)
CVE-2022-27926
CWE-79
Medium
WSO2 Management Console XSS (CVE-2022-29548)
CVE-2022-29548
CWE-79
Medium
Odoo XSS (CVE-2023-1434)
CVE-2023-1434
CWE-79
Medium
XSS on Apache HTTP Server 413 error pages via malformed HTTP method
CVE-2007-6203
CWE-79
Medium
LISTSERV XSS (CVE-2022-39195)
CVE-2022-39195
CWE-79
Medium
User controllable tag parameter (DOM-based)
-
CWE-79
Medium
Cross Site Scripting (Category Description) (CMS Made Simple)
CVE-2017-6555
CWE-79
Medium
BeyondTrust Secure Remote Access Base XSS (CVE-2021-31589)
CVE-2021-31589
CWE-79
Medium
Bitrix galleries_recalc.php XSS
-
CWE-601
Medium
Cross Site Scripting (globalmetadata) (CMS Made Simple)
CVE-2017-6556
CWE-79
Medium
Atlassian Confluence Stored Cross Site Scripting
CVE-2016-6283
-
Medium
SharePoint Reflected Cross-Site Scripting (CVE-2017-8514)
CVE-2017-8514
CWE-80
Medium
Laravel Ignition Reflected Cross-Site Scripting
-
CWE-80
Medium
User controllable charset
-
CWE-20
Medium
Keycloak clients-registrations XSS (CVE-2021-20323)
CVE-2021-20323
CWE-79
Medium
Cisco Adaptive Security Appliance (ASA) XSS (CVE-2020-3580)
CVE-2020-3580
CWE-79
Medium
HTML Injection
-
CWE-80
Medium
Spring Misconfiguration: HTML Escaping disabled
-
CWE-16
Medium
SAP NW KW XSS vulnerability (CVE-2021-42063)
CVE-2021-42063
CWE-79
Medium
ServiceNow logout XSS (CVE-2022-38463)
CVE-2022-38463
CWE-79
Medium
Web Server Cache Poisoning (CMS Made Simple) v1.x
CVE-2016-2784
CWE-20
Low
Cross site scripting (requiring unencoded quote)
-
CWE-79
Low
HTML Attribute Injection
-
CWE-80
Low
Apache Tomcat hello.jsp XSS
CVE-2007-1355
CWE-79
Low
Unfiltered header injection in Apache 1.3.34/2.0.57/2.2.1
CVE-2006-3918
CWE-79
Low
HTML Injection (requiring unencoded tag delimiter)
-
CWE-80
Information
Cross site scripting (requiring unencoded tag delimiter)
-
CWE-79
Information
(Possible) Cross site scripting
-
CWE-79
Information