Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21548

21548 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-23956 WordPress WP Easy Post Mailer Plugin <= 0.64 - Reflected Cross Site Scripting (XSS) vulnerability — WP Easy Post Mailer 7.1 High2025-03-03
CVE-2025-23883 WordPress Stray Random Quotes Plugin <= 1.9.9 - Reflected Cross Site Scripting (XSS) vulnerability — Stray Random Quotes 7.1 High2025-03-03
CVE-2025-23904 WordPress Rebrand Fluent Forms Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — Rebrand Fluent Forms 7.1 High2025-03-03
CVE-2025-23852 WordPress First Comment Redirect plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability — First Comment Redirect 7.1 High2025-03-03
CVE-2025-23847 WordPress Site Launcher Plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability — Site Launcher 7.1 High2025-03-03
CVE-2025-23850 WordPress Mojo Under Construction Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability — Mojo Under Construction 7.1 High2025-03-03
CVE-2025-23879 WordPress Easy Automatic Newsletter Lite Plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability — Easy Automatic Newsletter Lite 7.1 High2025-03-03
CVE-2025-23881 WordPress LJ Custom Menu Links Plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability — LJ Custom Menu Links 7.1 High2025-03-03
CVE-2025-23814 WordPress CRUDLab Like Box Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability — CRUDLab Like Box 7.1 High2025-03-03
CVE-2025-23843 WordPress WP-HR Manager plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability — WP-HR Manager: The Human Resources Plugin for WordPress 7.1 High2025-03-03
CVE-2025-23829 WordPress Woo Update Variations In Cart plugin <= 0.0.9 - Cross Site Scripting (XSS) vulnerability — Woo Update Variations In Cart 6.5 Medium2025-03-03
CVE-2025-23813 WordPress Guten Free Options Plugin <= 0.9.7 - Reflected Cross Site Scripting (XSS) vulnerability — Guten Free Options 7.1 High2025-03-03
CVE-2025-23762 WordPress DsgnWrks Twitter Importer plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability — DsgnWrks Twitter Importer 7.1 High2025-03-03
CVE-2025-23753 WordPress DN Sitemap Control plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability — DN Sitemap Control 7.1 High2025-03-03
CVE-2025-23740 WordPress Easy School Registration plugin <= 3.9.8 - Reflected Cross Site Scripting (XSS) vulnerability — Easy School Registration 7.1 High2025-03-03
CVE-2025-23741 WordPress Notifications Center plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability — Notifications Center 7.1 High2025-03-03
CVE-2025-23738 WordPress Ps Ads Pro plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability — Ps Ads Pro 7.1 High2025-03-03
CVE-2025-23739 WordPress WP Ultimate Reviews FREE plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability — WP Ultimate Reviews FREE 7.1 High2025-03-03
CVE-2025-23731 WordPress Tax Report for WooCommerce plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability — Tax Report for WooCommerce 7.1 High2025-03-03
CVE-2025-23726 WordPress ComparePress plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability — ComparePress 7.1 High2025-03-03
CVE-2025-23718 WordPress Mancx AskMe Widget plugin <= 0.3 - Reflected Cross Site Scripting (XSS) vulnerability — Mancx AskMe Widget 7.1 High2025-03-03
CVE-2025-23736 WordPress Form To JSON plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — Form To JSON 7.1 High2025-03-03
CVE-2025-23721 WordPress Mobigate plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability — Mobigate 7.1 High2025-03-03
CVE-2025-23670 WordPress 4 author cheer up donate plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability — 4 author cheer up donate 7.1 High2025-03-03
CVE-2025-23716 WordPress Login Watchdog plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability — Login Watchdog 7.1 High2025-03-03
CVE-2025-23663 WordPress Contexto plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — Contexto 7.1 High2025-03-03
CVE-2025-23668 WordPress ChatGPT Open AI Images & Content for WooCommerce plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability — ChatGPT Open AI Images & Content for WooCommerce 7.1 High2025-03-03
CVE-2025-23688 WordPress Cobwebo URL Plugin plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — Cobwebo URL Plugin 7.1 High2025-03-03
CVE-2025-23637 WordPress 新淘客WordPress插件 plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability — 新淘客WordPress插件 7.1 High2025-03-03
CVE-2025-23616 WordPress Canalplan plugin <= 5.31 - Reflected Cross Site Scripting (XSS) vulnerability — Canalplan 7.1 High2025-03-03

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21548 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.