Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21529

21529 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-9206 Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting — Meks Easy Maps 6.4 Medium2025-10-03
CVE-2025-9854 A Simple Multilanguage Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting — A Simple Multilanguage Plugin 6.4 Medium2025-10-03
CVE-2025-10192 WP Photo Effects <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — WP Photo Effects 6.4 Medium2025-10-03
CVE-2025-9077 Ultra Addons Lite for Elementor <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Field — Ultra Addons Lite for Elementor 6.4 Medium2025-10-03
CVE-2025-9332 Interactive Medical Drawing of Human Body <= 2.6 - Authenticated (Admin+) Stored Cross-Site Scripting — Interactive Human Anatomy with Clickable Body Parts 5.5 Medium2025-10-03
CVE-2025-9876 Ird Slider <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting — Ird Slider 6.4 Medium2025-10-03
CVE-2025-9875 Event Tickets, RSVPs, Calendar <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting — Event Tickets, RSVPs, Calendar 6.4 Medium2025-10-03
CVE-2025-9333 Smart Docs <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting — Smart Docs 5.5 Medium2025-10-03
CVE-2025-9130 Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode — Unify 6.4 Medium2025-10-03
CVE-2025-9045 Easy Elementor Addons <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting — Easy Elementor Addons – Addons Pack for Elementor Page Builder 6.4 Medium2025-10-03
CVE-2025-61599 Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input — emlog 5.4 -2025-10-03
CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection — emlog 7.6 High2025-10-03
CVE-2025-59774 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59773 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59772 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59771 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59770 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59769 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59768 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59767 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59766 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59765 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59764 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59763 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59762 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59761 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59760 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59759 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59758 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02
CVE-2025-59757 Multiple vulnerabilities in AndSoft's e-TMS — e-TMS 6.1 -2025-10-02

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21529 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.