Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21535

21535 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-55651 i-Educar Stored Cross-Site Scripting vulnerability — i-educar 5.4AIMediumAI2025-05-07
CVE-2023-7303 q2apro q2apro-on-site-notifications q2apro-onsitenotifications-page.php process_request cross site scripting — q2apro-on-site-notifications 3.5 Low2025-05-07
CVE-2025-46824 Discourse Code Review Plugin vulnerable to XSS via auto link commits — discourse-code-review 3.1 Low2025-05-07
CVE-2025-20147 Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability — Cisco Catalyst SD-WAN Manager 5.4 Medium2025-05-07
CVE-2025-46827 Graylog Allows Session Takeover via Insufficient HTML Sanitization — graylog2-server 8.0 High2025-05-07
CVE-2025-47686 WordPress DELUCKS SEO plugin <= 2.5.9 - Cross Site Scripting (XSS) Vulnerability — DELUCKS SEO 6.5 Medium2025-05-07
CVE-2025-47679 WordPress RS WP Book Showcase plugin <= 6.7.59 - Cross Site Scripting (XSS) vulnerability — RS WP Book Showcase 6.5 Medium2025-05-07
CVE-2025-47676 WordPress User Login History plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability — User Login History 6.5 Medium2025-05-07
CVE-2025-47677 WordPress Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery plugin <= 2.7.7.25 - Cross Site Scripting (XSS) Vulnerability — Photo Gallery 6.5 Medium2025-05-07
CVE-2025-47675 WordPress Woobox plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability — Woobox 6.5 Medium2025-05-07
CVE-2025-47669 WordPress CBX Map for Google Map & OpenStreetMap plugin <= 1.1.12 - Cross Site Scripting (XSS) Vulnerability — CBX Map for Google Map & OpenStreetMap 6.5 Medium2025-05-07
CVE-2025-47668 WordPress CookieCode plugin <= 2.4.4 - Cross Site Scripting (XSS) Vulnerability — CookieCode 5.9 Medium2025-05-07
CVE-2025-47665 WordPress N360 | Splash Screen plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability — N360 | Splash Screen 5.9 Medium2025-05-07
CVE-2025-47662 WordPress Woobox plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability — Woobox 6.5 Medium2025-05-07
CVE-2025-47659 WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability — WPBakery Visual Composer WHMCS Elements 6.5 Medium2025-05-07
CVE-2025-47656 WordPress Spiraclethemes Site Library plugin <= 1.5.4 - Cross Site Scripting (XSS) Vulnerability — Spiraclethemes Site Library 6.5 Medium2025-05-07
CVE-2025-47638 WordPress WP Discord Invite plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability — WP Discord Invite 5.9 Medium2025-05-07
CVE-2025-47632 WordPress Awesome Gallery plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability — Awesome Gallery 6.5 Medium2025-05-07
CVE-2025-47630 WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability — Ajax Load More 6.5 Medium2025-05-07
CVE-2025-47626 WordPress Submission DOM tracking for Contact Form 7 plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability — Submission DOM tracking for Contact Form 7 5.9 Medium2025-05-07
CVE-2025-47625 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability — DoFollow Case by Case 5.9 Medium2025-05-07
CVE-2025-47622 WordPress Email Notification on Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability — Email Notification on Login 5.9 Medium2025-05-07
CVE-2025-47623 WordPress Easy PayPal Buy Now Button plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability — Easy PayPal Buy Now Button 5.9 Medium2025-05-07
CVE-2025-47621 WordPress Meks Flexible Shortcodes plugin <= 1.3.6 - Cross Site Scripting (XSS) Vulnerability — Meks Flexible Shortcodes 6.5 Medium2025-05-07
CVE-2025-47617 WordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability — WP Front User Submit / Front Editor 5.9 Medium2025-05-07
CVE-2025-47616 WordPress aBlocks plugin <= 1.9.2 - Cross Site Scripting (XSS) Vulnerability — aBlocks 6.5 Medium2025-05-07
CVE-2025-47615 WordPress Amazon Product in a Post plugin <= 5.2.2 - Cross Site Scripting (XSS) Vulnerability — Amazon Product in a Post 5.9 Medium2025-05-07
CVE-2025-47607 WordPress Show All Comments plugin <= 7.0.1 - Cross Site Scripting (XSS) Vulnerability — Show All Comments 5.9 Medium2025-05-07
CVE-2025-47604 WordPress Inline Related Posts plugin <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability — Inline Related Posts 6.5 Medium2025-05-07
CVE-2025-47605 WordPress WP jQuery DataTable plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability — WP jQuery DataTable 5.9 Medium2025-05-07

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21535 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.