CWE-79 · Cross-site Scripting (page 85)
Page 85 of 100 — CVEs classified under CWE-79, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4968 | Medium | 6.4 | 2025-07-24 | The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Page Builder elements (Copyright Element… |
CVE-2025-32019 | Medium | 4.1 | 2025-07-23 | Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1… |
CVE-2025-4700 | High | 8.7 | 2025-07-23 | An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific c… |
CVE-2025-4439 | High | 7.7 | 2025-07-23 | An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowe… |
CVE-2025-50481 | Medium | 4.8 | 2025-07-23 | A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTM… |
CVE-2025-40598 | Medium | 6.1 | 2025-07-23 | A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execu… |
CVE-2025-4411 | Medium | 6.5 | 2025-07-23 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site S… |
CVE-2025-54297 | | 2025-07-23 | A stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla was discovered. | |
CVE-2025-54296 | | 2025-07-23 | A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered. | |
CVE-2025-54295 | | 2025-07-23 | A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered. | |
CVE-2025-27930 | Medium | 6.4 | 2025-07-23 | Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor. |
CVE-2024-53288 | Medium | 5.9 | 2025-07-23 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functionality in Synology Router Manager (SRM)… |
CVE-2024-53287 | Medium | 5.9 | 2025-07-23 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in VPN Setting functionality in Synology Router Manager (SRM… |
CVE-2025-6261 | Medium | 6.4 | 2025-07-23 | The Fleetwire Fleet Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fleetwire_list shortcode in all versions up t… |
CVE-2025-5753 | Medium | 6.4 | 2025-07-23 | The Valuation Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 1.3.2… |
CVE-2025-43488 | Medium | 4.8 | 2025-07-23 | A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a bypass of the… |
CVE-2025-43486 | Medium | 4.8 | 2025-07-23 | A potential stored cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website allows user in… |
CVE-2025-43484 | Medium | 6.1 | 2025-07-23 | A potential reflected cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website does not va… |
CVE-2025-54141 | High | 7.5 | 2025-07-22 | ViewVC is a browser interface for CVS and Subversion version control repositories. In versions 1.1.0 through 1.1.31 and 1.2.0 through 1.2.3, the standalone.py… |
CVE-2025-41425 | High | 8.1 | 2025-07-22 | DuraComm SPM-500 DP-10iN-100-MU is vulnerable to a cross-site scripting attack. This could allow an attacker to prevent legitimate users from accessing the w… |
CVE-2025-51462 | Medium | 6.1 | 2025-07-22 | Stored Cross-site Scripting (XSS) vulnerability in api.apps.dialog_app.set_dialog in RAGFlow 0.17.2 allows remote attackers to execute arbitrary JavaScript via… |
CVE-2025-51464 | High | 8.8 | 2025-07-22 | Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in victims browsers via malicious Python code submitt… |
CVE-2025-8015 | Medium | 6.4 | 2025-07-22 | The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded image's 'Title' and 'Slide lin… |
CVE-2025-51864 | Medium | 6.5 | 2025-07-22 | A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to hijack accounts thro… |
CVE-2025-51863 | Medium | 6.1 | 2025-07-22 | Self Cross Site Scripting (XSS) vulnerability in ChatGPT Unli (ChatGPTUnli.com) thru 2025-05-26 allows attackers to execute arbitrary code via a crafted SVG fi… |
CVE-2025-51862 | Medium | 6.1 | 2025-07-22 | Insecure Direct Object Reference (IDOR) vulnerability in TelegAI (telegai.com) thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamp… |
CVE-2025-51860 | Medium | 6.1 | 2025-07-22 | Stored Cross-Site Scripting (XSS) in TelegAI (telegai.com) 2025-05-26 in its chat component and character container component. An attacker can achieve arbitrar… |
CVE-2025-51859 | Medium | 6.5 | 2025-07-22 | Stored Cross-Site Scripting (XSS) vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script… |
CVE-2025-51858 | Medium | 6.1 | 2025-07-22 | Self Cross-Site Scripting (XSS) vulnerability in ChatPlayground.ai through 2025-05-24, allows attackers to execute arbitrary code and gain sensitive informatio… |
CVE-2025-4294 | Medium | 4.8 | 2025-07-22 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HotelRunner B2B allows Cross-Site Scripting (XSS)… |
CVE-2025-34141 | | 2025-07-22 | A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the `SQLConverterServlet` component. This vulnerability… | |
CVE-2025-4284 | Medium | 6.1 | 2025-07-22 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rolantis Information Technologies Agentis allows R… |
CVE-2025-7644 | Medium | 6.4 | 2025-07-22 | The Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery plugin for WordPress is vulnera… |
CVE-2025-7495 | Medium | 6.4 | 2025-07-22 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpmem_login_link' shortcode in all version… |
CVE-2025-7951 | Low | 3.5 | 2025-07-22 | A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0. This affects an unknown part of the file /send_message.php. The… |
CVE-2025-6831 | Medium | 6.4 | 2025-07-22 | The User Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's urcr_restrict shortcode in all versions up to, and inc… |
CVE-2025-5240 | Medium | 6.4 | 2025-07-22 | The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all versions up to, and incl… |
CVE-2025-7946 | Medium | 4.3 | 2025-07-22 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as problematic. This issue affects some unknown processing… |
CVE-2025-7944 | Medium | 4.3 | 2025-07-21 | A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /sear… |
CVE-2025-7943 | Medium | 4.3 | 2025-07-21 | A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of… |
CVE-2025-7486 | Medium | 4.4 | 2025-07-21 | The Ebook Store plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Order Details in all versions up to, and including, 5.8012 due to ins… |
CVE-2025-7942 | Low | 3.5 | 2025-07-21 | A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown funct… |
CVE-2025-7941 | Low | 3.5 | 2025-07-21 | A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-54128 | Medium | 6.1 | 2025-07-21 | HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.7 and below, the NodeJS version of HAX CMS has a disable… |
CVE-2025-53528 | High | 7.6 | 2025-07-21 | Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" e… |
CVE-2025-51403 | Medium | 6.5 | 2025-07-21 | A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrar… |
CVE-2025-51401 | Medium | 5.4 | 2025-07-21 | A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or… |
CVE-2025-51400 | Medium | 5.4 | 2025-07-21 | A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts o… |
CVE-2025-51398 | Medium | 5.4 | 2025-07-21 | A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts… |
CVE-2025-51396 | Medium | 5.4 | 2025-07-21 | A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted p… |
CVE-2020-26799 | Critical | 9.8 | 2025-07-21 | A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthenticated attacker to steal other users'… |
CVE-2025-7716 | Medium | 6.1 | 2025-07-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Real-time SEO for Drupal allows Cross-Site Scripti… |
CVE-2025-7715 | Medium | 6.1 | 2025-07-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Attributes allows Cross-Site Scripting (XSS)… |
CVE-2025-7392 | Medium | 6.1 | 2025-07-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Cookies Addons allows Cross-Site Scripting (XSS).T… |
CVE-2024-55040 | Medium | 6.1 | 2025-07-21 | Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted… |
CVE-2025-7926 | Low | 3.5 | 2025-07-21 | A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0. This affects an unknown part of the file /admi… |
CVE-2025-6235 | Medium | 6.1 | 2025-07-21 | In ExtremeControl before 25.5.12, a cross-site scripting (XSS) vulnerability was discovered in a login interface of the affected application. The issue stems f… |
CVE-2025-7925 | Medium | 4.3 | 2025-07-21 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0. Affected by this issue is some unknown fu… |
CVE-2025-7924 | Low | 3.5 | 2025-07-21 | A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2025-41681 | Medium | 4.8 | 2025-07-21 | A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content. |
CVE-2025-7354 | Medium | 6.4 | 2025-07-21 | The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up… |
CVE-2025-4685 | Medium | 6.4 | 2025-07-21 | The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML data attribu… |
CVE-2025-7920 | Medium | 6.1 | 2025-07-21 | WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute… |
CVE-2025-54316 | Medium | 4.9 | 2025-07-20 | An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to… |
CVE-2025-7902 | Low | 3.5 | 2025-07-20 | A vulnerability classified as problematic has been found in yangzongzhuan RuoYi up to 4.8.1. Affected is the function addSave of the file com/ruoyi/web/control… |
CVE-2025-7901 | Medium | 4.3 | 2025-07-20 | A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been rated as problematic. This issue affects some unknown processing of the file /swagger… |
CVE-2025-46383 | Medium | 6.1 | 2025-07-20 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-7887 | Medium | 4.3 | 2025-07-20 | A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc… |
CVE-2025-7885 | Medium | 4.3 | 2025-07-20 | A vulnerability, which was classified as problematic, has been found in Huashengdun WebSSH up to 1.6.2. Affected by this issue is some unknown functionality of… |
CVE-2025-7872 | Low | 3.5 | 2025-07-20 | A vulnerability was found in Portabilis i-Diario 1.5.0 and classified as problematic. This issue affects some unknown processing of the file /justificativas-de… |
CVE-2025-7871 | Low | 3.5 | 2025-07-20 | A vulnerability has been found in Portabilis i-Diario 1.5.0 and classified as problematic. This vulnerability affects unknown code of the file /conteudos. The… |
CVE-2025-7870 | Low | 3.5 | 2025-07-20 | A vulnerability, which was classified as problematic, was found in Portabilis i-Diario 1.5.0. This affects an unknown part of the component justificativas-de-f… |
CVE-2025-7869 | Low | 3.5 | 2025-07-20 | A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the… |
CVE-2025-7868 | Low | 3.5 | 2025-07-20 | A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educar_calendario_dia_motivo_cad… |
CVE-2025-7867 | Low | 3.5 | 2025-07-20 | A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component A… |
CVE-2025-7866 | Low | 3.5 | 2025-07-20 | A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/educ… |
CVE-2025-7865 | Low | 3.5 | 2025-07-20 | A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of the file… |
CVE-2025-7858 | Low | 3.5 | 2025-07-20 | A vulnerability classified as problematic has been found in PHPGurukul Apartment Visitors Management System 1.0. This affects an unknown part of the file /admi… |
CVE-2025-7857 | Low | 3.5 | 2025-07-19 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown func… |
CVE-2025-7856 | Low | 3.5 | 2025-07-19 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unk… |
CVE-2025-7840 | Low | 3.5 | 2025-07-19 | A vulnerability was found in Campcodes Online Movie Theater Seat Reservation System 1.0. It has been classified as problematic. This affects an unknown part of… |
CVE-2025-7819 | Low | 2.4 | 2025-07-19 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as problematic. This affects an unknown part of the fi… |
CVE-2025-7818 | Low | 3.5 | 2025-07-19 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as problematic. Affected by this issue is some unknown function… |
CVE-2025-7817 | Low | 3.5 | 2025-07-19 | A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as problematic. Affected by this vulnerability is an unkno… |
CVE-2025-7816 | Low | 3.5 | 2025-07-19 | A vulnerability, which was classified as problematic, was found in PHPGurukul Apartment Visitors Management System 1.0. Affected is an unknown function of the… |
CVE-2025-7815 | Low | 2.4 | 2025-07-19 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown pr… |
CVE-2025-6997 | Medium | 6.4 | 2025-07-19 | The ThemeREX Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.35.1.1 due t… |
CVE-2025-7661 | Medium | 6.4 | 2025-07-19 | The Partnerský systém Martinus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'martinus' shortcode in all versions up to, a… |
CVE-2025-7658 | Medium | 6.4 | 2025-07-19 | The Temporarily Hidden Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'temphc-start' shortcode in all versions up t… |
CVE-2025-7655 | Medium | 6.4 | 2025-07-19 | The Live Stream Badger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livestream' shortcode in all versions up to, and inc… |
CVE-2025-7653 | Medium | 6.4 | 2025-07-19 | The EPay.bg Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'epay' shortcode in all versions up to, and including… |
CVE-2025-50583 | Medium | 4.8 | 2025-07-18 | StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module. |
CVE-2025-50582 | Medium | 4.8 | 2025-07-18 | StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module. |
CVE-2025-50581 | Medium | 4.8 | 2025-07-18 | MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do. |
CVE-2025-7803 | Low | 3.5 | 2025-07-18 | A vulnerability was found in descreekert wx-discuz up to 12bd4745c63ec203cb32119bf77ead4a923bf277. It has been classified as problematic. This affects the func… |
CVE-2025-50584 | Medium | 4.8 | 2025-07-18 | StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module. |
CVE-2025-7802 | Low | 3.5 | 2025-07-18 | A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as problematic. Affected by this issue is some unknown functionality of… |
CVE-2025-7800 | Low | 3.5 | 2025-07-18 | A vulnerability classified as problematic was found in cgpandey hotelmis up to c572198e6c4780fccc63b1d3e8f3f72f825fc94e. This vulnerability affects unknown cod… |
CVE-2025-52169 | High | 7.1 | 2025-07-18 | agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability. |
CVE-2025-7791 | Low | 3.5 | 2025-07-18 | A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been declared as problematic. This vulnerability affects unknown code… |