CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,564)
page 1047 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-1000145 | Med | 0.40 | 6.1 | 0.02 | Oct 10, 2016 | Reflected XSS in wordpress plugin pondol-carousel v1.0 | ||
| CVE-2016-1000144 | Med | 0.40 | 6.1 | 0.02 | Oct 10, 2016 | Reflected XSS in wordpress plugin photoxhibit v2.1.8 | ||
| CVE-2016-1000143 | Med | 0.40 | 6.1 | 0.04 | Oct 10, 2016 | Reflected XSS in wordpress plugin photoxhibit v2.1.8 | ||
| CVE-2016-1000142 | Med | 0.40 | 6.1 | 0.04 | Oct 10, 2016 | Reflected XSS in wordpress plugin parsi-font v4.2.5 | ||
| CVE-2016-1000141 | Med | 0.40 | 6.1 | 0.03 | Oct 10, 2016 | Reflected XSS in wordpress plugin page-layout-builder v1.9.3 | ||
| CVE-2016-1000140 | Med | 0.40 | 6.1 | 0.03 | Oct 10, 2016 | Reflected XSS in wordpress plugin new-year-firework v1.1.9 | ||
| CVE-2016-1000139 | Med | 0.40 | 6.1 | 0.04 | Oct 10, 2016 | Reflected XSS in wordpress plugin infusionsoft v1.5.11 | ||
| CVE-2016-1000138 | Med | 0.40 | 6.1 | 0.03 | Oct 10, 2016 | Reflected XSS in wordpress plugin indexisto v1.0.5 | ||
| CVE-2016-1000137 | Med | 0.40 | 6.1 | 0.04 | Oct 10, 2016 | Reflected XSS in wordpress plugin hero-maps-pro v2.1.0 | ||
| CVE-2016-1000136 | Med | 0.40 | 6.1 | 0.03 | Oct 10, 2016 | Reflected XSS in wordpress plugin heat-trackr v1.0 | ||
| CVE-2016-1000135 | Med | 0.40 | 6.1 | 0.05 | Oct 10, 2016 | Reflected XSS in wordpress plugin hdw-tube v1.2 | ||
| CVE-2016-1000134 | Med | 0.40 | 6.1 | 0.05 | Oct 10, 2016 | Reflected XSS in wordpress plugin hdw-tube v1.2 | ||
| CVE-2016-1000133 | Med | 0.40 | 6.1 | 0.03 | Oct 10, 2016 | Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1 | ||
| CVE-2016-1000132 | Med | 0.40 | 6.1 | 0.04 | Oct 10, 2016 | Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8 | ||
| CVE-2016-1000131 | Med | 0.40 | 6.1 | 0.05 | Oct 10, 2016 | Reflected XSS in wordpress plugin e-search v1.0 | ||
| CVE-2016-1000130 | Med | 0.40 | 6.1 | 0.03 | Oct 10, 2016 | Reflected XSS in wordpress plugin e-search v1.0 | ||
| CVE-2016-1000129 | Med | 0.40 | 6.1 | 0.03 | Oct 10, 2016 | Reflected XSS in wordpress plugin defa-online-image-protector v3.3 | ||
| CVE-2016-1000128 | Med | 0.40 | 6.1 | 0.04 | Oct 10, 2016 | Reflected XSS in wordpress plugin anti-plagiarism v3.60 | ||
| CVE-2016-1000127 | Med | 0.40 | 6.1 | 0.04 | Oct 10, 2016 | Reflected XSS in wordpress plugin ajax-random-post v2.00 | ||
| CVE-2016-1000126 | Med | 0.40 | 6.1 | 0.04 | Oct 10, 2016 | Reflected XSS in wordpress plugin admin-font-editor v1.8 |
- risk 0.40cvss 6.1epss 0.02
Reflected XSS in wordpress plugin pondol-carousel v1.0
- risk 0.40cvss 6.1epss 0.02
Reflected XSS in wordpress plugin photoxhibit v2.1.8
- risk 0.40cvss 6.1epss 0.04
Reflected XSS in wordpress plugin photoxhibit v2.1.8
- risk 0.40cvss 6.1epss 0.04
Reflected XSS in wordpress plugin parsi-font v4.2.5
- risk 0.40cvss 6.1epss 0.03
Reflected XSS in wordpress plugin page-layout-builder v1.9.3
- risk 0.40cvss 6.1epss 0.03
Reflected XSS in wordpress plugin new-year-firework v1.1.9
- risk 0.40cvss 6.1epss 0.04
Reflected XSS in wordpress plugin infusionsoft v1.5.11
- risk 0.40cvss 6.1epss 0.03
Reflected XSS in wordpress plugin indexisto v1.0.5
- risk 0.40cvss 6.1epss 0.04
Reflected XSS in wordpress plugin hero-maps-pro v2.1.0
- risk 0.40cvss 6.1epss 0.03
Reflected XSS in wordpress plugin heat-trackr v1.0
- risk 0.40cvss 6.1epss 0.05
Reflected XSS in wordpress plugin hdw-tube v1.2
- risk 0.40cvss 6.1epss 0.05
Reflected XSS in wordpress plugin hdw-tube v1.2
- risk 0.40cvss 6.1epss 0.03
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1
- risk 0.40cvss 6.1epss 0.04
Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
- risk 0.40cvss 6.1epss 0.05
Reflected XSS in wordpress plugin e-search v1.0
- risk 0.40cvss 6.1epss 0.03
Reflected XSS in wordpress plugin e-search v1.0
- risk 0.40cvss 6.1epss 0.03
Reflected XSS in wordpress plugin defa-online-image-protector v3.3
- risk 0.40cvss 6.1epss 0.04
Reflected XSS in wordpress plugin anti-plagiarism v3.60
- risk 0.40cvss 6.1epss 0.04
Reflected XSS in wordpress plugin ajax-random-post v2.00
- risk 0.40cvss 6.1epss 0.04
Reflected XSS in wordpress plugin admin-font-editor v1.8