Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21530

21530 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-0900 Cross-Site Scripting Vulnerability in DivvyDrive — DivvyDrive 5.4 Medium2022-05-23
CVE-2022-1817 Badminton Center Management System Userlist Module cross site scripting — Badminton Center Management System 3.5 Low2022-05-23
CVE-2022-1816 Zoo Management System Content Module cross site scripting — Zoo Management System 3.5 Low2022-05-23
CVE-2022-1825 Cross-site Scripting (XSS) - Reflected in collectiveaccess/providence — collectiveaccess/providence 6.1 -2022-05-23
CVE-2022-1558 Curtain <= 1.0.2 - Admin+ Stored Cross-Site Scripting — Curtain 4.8 -2022-05-23
CVE-2022-1547 Check & Log email < 1.0.6 - Reflected Cross-Site Scripting — Check & Log Email 6.1 -2022-05-23
CVE-2022-1320 Sliderby10Web < 1.2.52 - Admin+ Stored Cross-Site Scripting — Sliderby10Web 4.8 -2022-05-23
CVE-2022-1298 Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting — Tabs 4.8 -2022-05-23
CVE-2022-1268 Donate Extra <= 2.02 - Reflected Cross-Site Scripting — Donate Extra 6.1 -2022-05-23
CVE-2022-1221 Gwyn's Imagemap Selector <= 0.3.3 - Reflected Cross-Site Scripting — Gwyn's Imagemap Selector 6.1 -2022-05-23
CVE-2022-1218 Domain Replace <= 1.3.8 - Reflected Cross-Site Scripting — Domain Replace 6.1 -2022-05-23
CVE-2022-1192 Turn off all comments <= 1.0 - Reflected Cross-Site Scripting — Turn off all comments 6.1 -2022-05-23
CVE-2022-1093 WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs — WP Meta SEO 4.8 -2022-05-23
CVE-2022-0346 Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting — XML Sitemap Generator for Google 6.1 -2022-05-23
CVE-2022-29432 WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities — wpDataTables – Tables & Table Charts (WordPress plugin) 3.4 Low2022-05-20
CVE-2022-29428 WordPress WP Slider Plugin <= 1.4.5 - Cross-Site Scripting (XSS) vulnerability — WP Slider Plugin 4.1 Medium2022-05-20
CVE-2022-29426 WordPress Slideshow, Image Slider by 2J plugin <= 1.3.54 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability — Slideshow, Image Slider by 2J (WordPress plugin) 5.4 Medium2022-05-20
CVE-2022-29425 WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability — Checkout Files Upload for WooCommerce (WordPress plugin) 6.1 Medium2022-05-20
CVE-2022-29424 WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability — Image Hover Effects Ultimate (WordPress plugin) 4.8 Medium2022-05-20
CVE-2021-36833 WordPress MC4WP plugin <= 4.8.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability — MC4WP: Mailchimp for WordPress 4.8 Medium2022-05-20
CVE-2022-29183 Reflected XSS in GoCD — gocd 4.3 Medium2022-05-20
CVE-2022-29182 DOM-based XSS in GoCD — gocd 4.3 Medium2022-05-20
CVE-2022-1806 Cross-site Scripting (XSS) - Reflected in rtxteam/rtx — rtxteam/rtx 6.1 -2022-05-20
CVE-2022-29449 WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability — Opal Hotel Room Booking (WordPress plugin) 4.1 Medium2022-05-19
CVE-2022-1730 Cross-site Scripting (XSS) - Stored in jgraph/drawio — jgraph/drawio 5.4 -2022-05-19
CVE-2022-29230 Potential cross-site scripting (XSS) vulnerability in Hydrogen — hydrogen 6.3 Medium2022-05-18
CVE-2022-25617 WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability — Code Snippets (WordPress plugin) 4.7 Medium2022-05-18
CVE-2022-30596 Moodle 跨站脚本漏洞 — moodle 5.4 -2022-05-18
CVE-2022-1432 Cross-site Scripting (XSS) - Generic in octoprint/octoprint — octoprint/octoprint 5.4 -2022-05-18
CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint — octoprint/octoprint 4.8 -2022-05-18

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21530 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.