Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21530

21530 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-9500 TablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parameter — TablePress – Tables in WordPress made easy 6.4 Medium2025-08-30
CVE-2025-9499 Ocean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode — Ocean Extra 6.4 Medium2025-08-30
CVE-2025-22483 License Center — License Center 4.8 -2025-08-29
CVE-2024-12923 Photo Station — Photo Station 6.1 -2025-08-29
CVE-2025-9659 O2OA Personal Profile widget cross site scripting — O2OA 3.5 Low2025-08-29
CVE-2025-9658 O2OA Personal Profile dict cross site scripting — O2OA 3.5 Low2025-08-29
CVE-2025-9657 O2OA Personal Profile script cross site scripting — O2OA 3.5 Low2025-08-29
CVE-2025-9656 PHPGurukul Directory Management System add-directory.php cross site scripting — Directory Management System 4.3 Medium2025-08-29
CVE-2025-9655 O2OA Personal Profile person cross site scripting — O2OA 3.5 Low2025-08-29
CVE-2025-9653 Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting — i-Educar 3.5 Low2025-08-29
CVE-2025-9652 Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting — i-Educar 3.5 Low2025-08-29
CVE-2025-9647 mtons mblog list cross site scripting — mblog 4.3 Medium2025-08-29
CVE-2025-9646 O2OA calendarConfig cross site scripting — O2OA 3.5 Low2025-08-29
CVE-2025-40709 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH — OpenAtlas 6.1 -2025-08-29
CVE-2025-40708 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH — OpenAtlas 6.1 -2025-08-29
CVE-2025-40707 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH — OpenAtlas 6.1 -2025-08-29
CVE-2025-40706 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH — OpenAtlas 6.1 -2025-08-29
CVE-2025-40705 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH — OpenAtlas 6.1 -2025-08-29
CVE-2025-40704 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH — OpenAtlas 6.1 -2025-08-29
CVE-2025-40703 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH — OpenAtlas 6.1 -2025-08-29
CVE-2025-40702 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH — OpenAtlas 6.1 -2025-08-29
CVE-2025-8150 Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets — Events Addon for Elementor 6.4 Medium2025-08-29
CVE-2024-13987 Synology RADIUS Server 跨站脚本漏洞 — RADIUS Server 5.9 Medium2025-08-29
CVE-2025-8290 List Subpages <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter — List Sub Pages 6.4 Medium2025-08-29
CVE-2025-8619 OSM Map Widget for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL — OSM Map Widget for Elementor 6.4 Medium2025-08-29
CVE-2025-9595 code-projects Student Information Management System login.php cross site scripting — Student Information Management System 4.3 Medium2025-08-28
CVE-2025-9591 ZrLog Theme Configuration Form config cross site scripting — ZrLog 2.4 Low2025-08-28
CVE-2025-9590 Weaver E-Mobile Mobile Management Platform cross site scripting — E-Mobile Mobile Management Platform 3.5 Low2025-08-28
CVE-2024-49790 IBM Watson Studio on Cloud Pak for Data cross-site scripting — Watson Studio on Cloud Pak for Data 5.4 Medium2025-08-28
CVE-2025-54724 WordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerability — Golo 7.1 High2025-08-28

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21530 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.