Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21529

21529 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-60177 WordPress Recaptcha – wp Plugin <= 0.2.6 - Cross Site Scripting (XSS) Vulnerability — Recaptcha – wp 5.9 Medium2025-09-26
CVE-2025-60179 WordPress Click & Tweet Plugin <= 0.8.9 - Cross Site Scripting (XSS) Vulnerability — Click & Tweet 5.9 Medium2025-09-26
CVE-2025-60162 WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability — Job Board Manager 6.5 Medium2025-09-26
CVE-2025-60163 WordPress bbp topic count plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability — bbp topic count 6.5 Medium2025-09-26
CVE-2025-60160 WordPress Smart Related Products plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability — Smart Related Products 5.9 Medium2025-09-26
CVE-2025-60158 WordPress Nota Fiscal Eletrônica WooCommerce plugin <= 3.4.0.9 - Cross Site Scripting (XSS) vulnerability — Nota Fiscal Eletrônica WooCommerce 5.9 Medium2025-09-26
CVE-2025-60157 WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability — WP Ticket Customer Service Software & Support Ticket System 6.5 Medium2025-09-26
CVE-2025-60154 WordPress MWW Disclaimer Buttons plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability — MWW Disclaimer Buttons 5.9 Medium2025-09-26
CVE-2025-60149 WordPress Notely plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability — Notely 5.9 Medium2025-09-26
CVE-2025-60147 WordPress HT Feed Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability — HT Feed 6.5 Medium2025-09-26
CVE-2025-60146 WordPress Map Categories to Pages Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability — Map Categories to Pages 5.9 Medium2025-09-26
CVE-2025-60144 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability — Lenix scss compiler 5.9 Medium2025-09-26
CVE-2025-60142 WordPress Simple Meta Tags Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability — Simple Meta Tags 6.5 Medium2025-09-26
CVE-2025-60141 WordPress The Tribal Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability — The Tribal 5.9 Medium2025-09-26
CVE-2025-60138 WordPress SKT Blocks plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability — SKT Blocks 6.5 Medium2025-09-26
CVE-2025-60136 WordPress User Notes plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability — User Notes 5.9 Medium2025-09-26
CVE-2025-60133 WordPress PE Easy Slider Plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability — PE Easy Slider 5.9 Medium2025-09-26
CVE-2025-60124 WordPress Simple Colorbox Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability — Simple Colorbox 6.5 Medium2025-09-26
CVE-2025-60112 WordPress aThemes Addons for Elementor Plugin <= 1.1.2 - Cross Site Scripting (XSS) Vulnerability — aThemes Addons for Elementor 6.5 Medium2025-09-26
CVE-2025-60105 WordPress Ditty Plugin <= 3.1.58 - Cross Site Scripting (XSS) Vulnerability — Ditty 6.5 Medium2025-09-26
CVE-2025-60104 WordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability — Gallery Custom Links 5.9 Medium2025-09-26
CVE-2025-60102 WordPress WPFront User Role Editor Plugin <= 4.2.3 - Cross Site Scripting (XSS) Vulnerability — WPFront User Role Editor 6.5 Medium2025-09-26
CVE-2025-60099 WordPress Embed Any Document Plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability — Embed Any Document 6.5 Medium2025-09-26
CVE-2025-60101 WordPress Woostify Theme <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability — Woostify 5.9 Medium2025-09-26
CVE-2025-60040 WordPress wp-mpdf Plugin <= 3.9.1 - Cross Site Scripting (XSS) Vulnerability — wp-mpdf 6.5 Medium2025-09-26
CVE-2025-4957 WordPress ProfileGrid plugin <= 5.9.5.7 - Reflected Cross Site Scripting (XSS) vulnerability — ProfileGrid 7.1 High2025-09-26
CVE-2025-48107 WordPress Uncode theme < 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability — Uncode 7.1 High2025-09-26
CVE-2025-27006 WordPress Authorsy Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability — Authorsy 6.5 Medium2025-09-26
CVE-2025-58917 WordPress Quantities and Units for WooCommerce plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability — Quantities and Units for WooCommerce 6.5 Medium2025-09-26
CVE-2025-59012 WordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability — Traveler 7.1 High2025-09-26

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21529 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.