Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21550

21550 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-23519 WordPress G Web Pro Store Locator plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability — G Web Pro Store Locator 7.1 High2025-03-03
CVE-2025-23516 WordPress Sale with Razorpay plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — Sale with Razorpay 7.1 High2025-03-03
CVE-2025-23517 WordPress Google Map on Post/Page plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability — Google Map on Post/Page 7.1 High2025-03-03
CVE-2025-23505 WordPress Pit Login Welcome plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability — Pit Login Welcome 7.1 High2025-03-03
CVE-2025-23496 WordPress WP FPO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — WP FPO 7.1 High2025-03-03
CVE-2025-23494 WordPress Quizzin plugin <= 1.01.4 - Reflected Cross Site Scripting (XSS) vulnerability — Quizzin 7.1 High2025-03-03
CVE-2025-23493 WordPress Google Transliteration plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability — Google Transliteration 7.1 High2025-03-03
CVE-2025-23488 WordPress rng-refresh plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — rng-refresh 7.1 High2025-03-03
CVE-2025-23485 WordPress RS Survey plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — RS Survey 7.1 High2025-03-03
CVE-2025-23490 WordPress Browser-Update-Notify plugin <= 0.2.1 - Reflected Cross Site Scripting (XSS) vulnerability — Browser-Update-Notify 7.1 High2025-03-03
CVE-2025-23487 WordPress Easy Gallery plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability — Easy Gallery 7.1 High2025-03-03
CVE-2025-23484 WordPress Predict When plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability — Predict When 7.1 High2025-03-03
CVE-2025-23481 WordPress Ni WooCommerce Sales Report Email plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability — Ni WooCommerce Sales Report Email 7.1 High2025-03-03
CVE-2025-23482 WordPress azurecurve Floating Featured Image plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability — azurecurve Floating Featured Image 7.1 High2025-03-03
CVE-2025-23480 WordPress RSVP ME plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability — RSVP ME 6.5 Medium2025-03-03
CVE-2025-23478 WordPress Photo Video Store plugin <= 21.07 - Reflected Cross Site Scripting (XSS) vulnerability — Photo Video Store 7.1 High2025-03-03
CVE-2025-23473 WordPress Killer Theme Options plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability — Killer Theme Options 7.1 High2025-03-03
CVE-2025-23479 WordPress melascrivi plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability — melascrivi 7.1 High2025-03-03
CVE-2025-23472 WordPress Flexo Slider plugin <= 1.0013 - Reflected Cross Site Scripting (XSS) vulnerability — Flexo Slider 7.1 High2025-03-03
CVE-2025-23468 WordPress Essay Wizard (wpCRES) plugin <= 1.0.6.4 - Reflected Cross Site Scripting (XSS) vulnerability — Essay Wizard (wpCRES) 7.1 High2025-03-03
CVE-2025-23465 WordPress Vampire Character Manager plugin <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability — Vampire Character Manager 7.1 High2025-03-03
CVE-2025-23464 WordPress Twitter News Feed plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability — Twitter News Feed 7.1 High2025-03-03
CVE-2025-23451 WordPress Awesome Twitter Feeds plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — Awesome Twitter Feeds 7.1 High2025-03-03
CVE-2025-23450 WordPress AW WooCommerce Kode Pembayaran plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability — AW WooCommerce Kode Pembayaran 7.1 High2025-03-03
CVE-2025-23447 WordPress Smooth Dynamic Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability — Smooth Dynamic Slider 7.1 High2025-03-03
CVE-2025-23437 WordPress ntp-header-images plugin <=1.2 - Cross Site Scripting (XSS) vulnerability — ntp-header-images 7.1 High2025-03-03
CVE-2025-23439 WordPress TinyMCE Extended Config plugin <= 0.1.0 - Reflected Cross Site Scripting (XSS) vulnerability — TinyMCE Extended Config 7.1 High2025-03-03
CVE-2025-23441 WordPress Attach Gallery Posts plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability — Attach Gallery Posts 7.1 High2025-03-03
CVE-2025-23425 WordPress Marekkis Watermark plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability — Marekkis Watermark 7.1 High2025-03-03
CVE-2025-23433 WordPress vcOS plugin <=1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability — vcOS 7.1 High2025-03-03

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21550 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.