Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

XSS

This page lists 3368 vulnerabilities in this category.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (2.6.2)
CVE-2024-3994
CWE-79
High
WordPress Plugin Tutor LMS Elementor Addons Cross-Site Scripting (2.1.3)
CVE-2024-29913
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.8.4)
CVE-2024-2765
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.8.3)
CVE-2024-2123
CWE-79
High
WordPress Plugin WP-Members Membership Cross-Site Scripting (3.4.9.2)
CVE-2024-1852
CWE-79
High
WordPress Plugin Yoast SEO Cross-Site Scripting (20.2)
-
CWE-79
High
WordPress Plugin Yoast SEO Cross-Site Scripting (22.5)
CVE-2024-4041
CWE-79
High
WordPress Plugin Yoast SEO Cross-Site Scripting (22.6)
CVE-2024-4984
CWE-79
High
WordPress Plugin Yoast SEO Cross-Site Scripting (21.0)
CVE-2023-40680
CWE-79
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block Cross-Site Scripting (2.5.18)
CVE-2023-6485
CWE-79
High
WordPress Plugin MW WP Form Cross-Site Scripting (5.0.6)
CVE-2024-24804
CWE-79
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Cross-Site Scripting (4.2.2)
CVE-2023-6000
CWE-79
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Cross-Site Scripting (4.2.6)
CVE-2024-30184
CWE-79
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Cross-Site Scripting (4.2.7)
CVE-2024-2506
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.7.0)
CVE-2023-5958
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.8.6)
CVE-2023-6629
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.8.7)
CVE-2023-7027
CWE-79
High
WordPress Plugin Shield Security-Smart Bot Blocking & Intrusion Prevention Security Cross-Site Scripting (18.5.7)
CVE-2024-22163
CWE-79
High
WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Cross-Site Scripting (1.5.107)
CVE-2024-3190
CWE-79
High
WordPress Plugin Visual Website Collaboration, Feedback & Project Management-Atarim Cross-Site Scripting (3.30)
CVE-2024-2793
CWE-79
High
WordPress Plugin WooCommerce Cross-Site Scripting (8.9.2)
CVE-2024-37297
CWE-79
High
WordPress Plugin WP Logs Book Cross-Site Scripting (1.0.1)
CVE-2024-4477
CWE-79
High
WordPress Plugin WP TripAdvisor Review Slider Cross-Site Scripting (11.8)
CVE-2023-6037
CWE-79
High
WordPress Plugin Brafton Cross-Site Scripting (3.4.7)
CVE-2016-10973
CWE-79
High
WordPress Plugin Cookie Consent for WP-Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) Cross-Site Scripting (3.2.0)
CVE-2024-4869
CWE-79
High
WordPress Plugin Import Spreadsheets from Microsoft Excel Cross-Site Scripting (10.1.3)
CVE-2023-48289
CWE-79
High
WordPress Plugin OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) Cross-Site Scripting (1.1.1)
CVE-2024-30450
CWE-79
High
WordPress Plugin PowerPack Lite for Beaver Builder Cross-Site Scripting (1.2.9.2)
CVE-2022-0176
CWE-79
High
WordPress Plugin PowerPack Lite for Beaver Builder Cross-Site Scripting (1.3.0.4)
CVE-2024-37409
CWE-79
High
WordPress Plugin PowerPack Lite for Beaver Builder Cross-Site Scripting (1.3.0)
CVE-2024-2289
CWE-79
High
WordPress Plugin WPCafe-Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce Cross-Site Scripting (2.2.24)
CVE-2024-5427
CWE-79
High
WordPress Plugin WPCafe-Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce Cross-Site Scripting (2.1.4)
-
CWE-79
High
WordPress Plugin Redux Framework Cross-Site Scripting (4.4.17)
CVE-2024-6828
CWE-79
High
WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Cross-Site Scripting (5.3.14)
CVE-2024-6753
CWE-79
High
User controllable tag parameter
-
CWE-79
Medium
Nginx Redirect Header Injection
-
CWE-93
Medium
XSS on Apache HTTP Server 413 error pages via malformed HTTP method
CVE-2007-6203
CWE-79
Medium
HTML Injection
-
CWE-80
Medium
User controllable charset
-
CWE-20
Medium
Cross Site Scripting (Category Description) (CMS Made Simple)
CVE-2017-6555
CWE-79
Medium
Cross Site Scripting (globalmetadata) (CMS Made Simple)
CVE-2017-6556
CWE-79
Medium
Atlassian Confluence Stored Cross Site Scripting
CVE-2016-6283
CWE-79
Medium
SharePoint Reflected Cross-Site Scripting (CVE-2017-8514)
CVE-2017-8514
CWE-80
Medium
Laravel Ignition Reflected Cross-Site Scripting
-
CWE-80
Medium
Bitrix galleries_recalc.php XSS
-
CWE-601
Medium
Cisco Adaptive Security Appliance (ASA) XSS (CVE-2020-3580)
CVE-2020-3580
CWE-79
Medium
Spring Misconfiguration: HTML Escaping disabled
-
CWE-116
Medium
SAP NW KW XSS vulnerability (CVE-2021-42063)
CVE-2021-42063
CWE-79
Medium
ServiceNow logout XSS (CVE-2022-38463)
CVE-2022-38463
CWE-79
Medium
Keycloak clients-registrations XSS (CVE-2021-20323)
CVE-2021-20323
CWE-79
Medium
BeyondTrust Secure Remote Access Base XSS (CVE-2021-31589)
CVE-2021-31589
CWE-79
Medium
LISTSERV XSS (CVE-2022-39195)
CVE-2022-39195
CWE-79
Medium
Odoo XSS (CVE-2023-1434)
CVE-2023-1434
CWE-79
Medium
WSO2 Management Console XSS (CVE-2022-29548)
CVE-2022-29548
CWE-79
Medium
Zimbra Collaboration XSS (CVE-2022-27926)
CVE-2022-27926
CWE-79
Medium
cPanel XSS (CVE-2023-29489)
CVE-2023-29489
CWE-79
Medium
ColdFusion XSS (CVE-2023-44352)
CVE-2023-44352
CWE-79
Medium
Citrix NetScaler ADC/Gateway XSS (CVE-2025-12101)
CVE-2025-12101
CWE-79
Medium
PAN-OS GlobalProtect XSS (CVE-2025-0133)
CVE-2025-0133
CWE-79
Medium
User controllable tag parameter (DOM-based)
-
CWE-79
Medium
Unfiltered header injection in Apache 1.3.34/2.0.57/2.2.1
CVE-2006-3918
CWE-79
Low
Apache Tomcat hello.jsp XSS
CVE-2007-1355
CWE-79
Low
Web Server Cache Poisoning (CMS Made Simple) v1.x
CVE-2016-2784
CWE-20
Low
HTML Attribute Injection
-
CWE-80
Low
(Possible) Cross site scripting
-
CWE-79
Information
Cross site scripting (requiring unencoded tag delimiter)
-
CWE-79
Information
Cross site scripting (requiring unencoded quote)
-
CWE-79
Information
HTML Injection (requiring unencoded tag delimiter)
-
CWE-80
Information