Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21548

21548 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-25158 WordPress Uncomplicated SEO plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability — Uncomplicated SEO 7.1 High2025-03-03
CVE-2025-25169 WordPress Authors Autocomplete Meta Box plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability — Authors Autocomplete Meta Box 7.1 High2025-03-03
CVE-2025-25164 WordPress Meta Accelerator plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability — Meta Accelerator 7.1 High2025-03-03
CVE-2025-25165 WordPress Staff Directory Plugin: Company Directory Plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability — Staff Directory Plugin: Company Directory 7.1 High2025-03-03
CVE-2025-25133 WordPress WP Frontend Submit Plugin <= 1.1.0 - Reflected Cross-Site Scripting vulnerability — WP Frontend Submit 7.1 High2025-03-03
CVE-2025-25157 WordPress WP Church Center Plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability — WP Church Center 7.1 High2025-03-03
CVE-2025-25132 WordPress Visitor Details plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability — Visitor Details 7.1 High2025-03-03
CVE-2025-25142 WordPress WP Less Compiler plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability — WP Less Compiler 7.1 High2025-03-03
CVE-2025-25124 WordPress Status Updater Plugin <= 9.21 - Reflected Cross Site Scripting (XSS) vulnerability — Status Updater 7.1 High2025-03-03
CVE-2025-25129 WordPress Callback Request plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability — Callback Request 7.1 High2025-03-03
CVE-2025-25131 WordPress RJ Quickcharts plugin <= 0.6.1 - Cross Site Scripting (XSS) vulnerability — RJ Quickcharts 6.5 Medium2025-03-03
CVE-2025-25127 WordPress Contact Us By Lord Linus Plugin <= 2.6 - Reflected Cross Site Scripting (XSS) vulnerability — Contact Us By Lord Linus 7.1 High2025-03-03
CVE-2025-25118 WordPress WPOptin plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability — Top Bar – PopUps – by WPOptin 7.1 High2025-03-03
CVE-2025-25113 WordPress Implied Cookie Consent plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability — Implied Cookie Consent 7.1 High2025-03-03
CVE-2025-25114 WordPress User Role plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — User Role 7.1 High2025-03-03
CVE-2025-25119 WordPress Woocommerce osCommerce Sync plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability — Woocommerce osCommerce Sync 7.1 High2025-03-03
CVE-2025-25115 WordPress Like dislike plus counter plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability — Like dislike plus counter 6.5 Medium2025-03-03
CVE-2025-25092 WordPress All push notification for WP plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability — All push notification for WP 7.1 High2025-03-03
CVE-2025-25102 WordPress Yahoo BOSS Plugin <= 0.7 - Reflected Cross Site Scripting (XSS) vulnerability — Yahoo BOSS 7.1 High2025-03-03
CVE-2025-25099 WordPress Appointment Buddy Widget By Accrete plugin <= 1.2. - Reflected Cross-Site Scripting vulnerability — Appointment Buddy Widget 7.1 High2025-03-03
CVE-2025-25108 WordPress SW Plus Plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability — SW Plus 7.1 High2025-03-03
CVE-2025-25090 WordPress Dreamstime Stock Photos plugin <= 4.1 - Reflected Cross Site Scripting (XSS) vulnerability — Dreamstime Stock Photos 7.1 High2025-03-03
CVE-2025-25089 WordPress Image Rotator plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability — Image Rotator 7.1 High2025-03-03
CVE-2025-25083 WordPress EP4 More Embeds Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability — EP4 More Embeds 7.1 High2025-03-03
CVE-2025-25084 WordPress UniTimetable plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability — UniTimetable 6.5 Medium2025-03-03
CVE-2025-25087 WordPress seekXL Snapr plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability — seekXL Snapr 7.1 High2025-03-03
CVE-2025-25070 WordPress Album Reviewer plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability — Album Reviewer 7.1 High2025-03-03
CVE-2025-24694 WordPress CM Pop-Up Banners plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerability — CM Pop-Up banners 7.1 High2025-03-03
CVE-2025-24758 WordPress CM Map Locations plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability — CM Map Locations 7.1 High2025-03-03
CVE-2025-23903 WordPress Local Shipping Labels for WooCommerce Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability — Local Shipping Labels for WooCommerce 7.1 High2025-03-03

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21548 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.