CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (Cross Site Scripting (XSS))

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2017-5516 79 XSS 2017-01-17 2017-01-17
4.3
None Remote Medium Not required None Partial None
Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters.
2 CVE-2017-5515 79 XSS 2017-01-17 2017-01-17
3.5
None Remote Medium Single system None Partial None
Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names.
3 CVE-2017-5494 79 XSS 2017-01-15 2017-01-17
3.5
None Remote Medium Single system None Partial None
Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a (1) comment frame or (2) avatar frame.
4 CVE-2017-5490 79 XSS 2017-01-14 2017-01-18
4.3
None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted directory name of a theme, related to wp-admin/includes/class-theme-installer-skin.php.
5 CVE-2017-5488 79 XSS 2017-01-14 2017-01-18
4.3
None Remote Medium Not required None Partial None
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) version header of a plugin.
6 CVE-2017-5179 79 XSS 2017-01-05 2017-01-10
3.5
None Remote Medium Single system None Partial None
Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
7 CVE-2017-3890 Exec Code XSS 2017-01-13 2017-01-17
0.0
None ??? ??? ??? ??? ??? ???
A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and earlier, and vAPP, versions 4.6.0 to 5.4.1, allows remote attackers to execute script commands in the context of the affected browser by persuading a user to click an attacker-supplied malicious link.
8 CVE-2016-1000155 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin wpsolr-search-engine v7.6
9 CVE-2016-1000154 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin whizz v1.0.7
10 CVE-2016-1000153 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin tidio-gallery v1.1
11 CVE-2016-1000152 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin tidio-form v1.0
12 CVE-2016-1000151 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin tera-charts v1.0
13 CVE-2016-1000150 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin simplified-content v1.0.0
14 CVE-2016-1000149 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin simpel-reserveren v3.5.2
15 CVE-2016-1000148 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin s3-video v0.983
16 CVE-2016-1000147 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin recipes-writer v1.0.4
17 CVE-2016-1000146 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin pondol-formmail v1.1
18 CVE-2016-1000145 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin pondol-carousel v1.0
19 CVE-2016-1000144 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin photoxhibit v2.1.8
20 CVE-2016-1000143 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin photoxhibit v2.1.8
21 CVE-2016-1000142 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin parsi-font v4.2.5
22 CVE-2016-1000141 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin page-layout-builder v1.9.3
23 CVE-2016-1000140 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin new-year-firework v1.1.9
24 CVE-2016-1000139 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin infusionsoft v1.5.11
25 CVE-2016-1000138 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin indexisto v1.0.5
26 CVE-2016-1000137 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin hero-maps-pro v2.1.0
27 CVE-2016-1000136 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin heat-trackr v1.0
28 CVE-2016-1000135 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin hdw-tube v1.2
29 CVE-2016-1000134 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin hdw-tube v1.2
30 CVE-2016-1000133 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1
31 CVE-2016-1000132 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
32 CVE-2016-1000131 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin e-search v1.0
33 CVE-2016-1000130 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin e-search v1.0
34 CVE-2016-1000129 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin defa-online-image-protector v3.3
35 CVE-2016-1000128 79 XSS 2016-10-10 2016-12-22
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin anti-plagiarism v3.60
36 CVE-2016-1000127 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin ajax-random-post v2.00
37 CVE-2016-1000126 79 XSS 2016-10-10 2016-11-28
4.3
None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin admin-font-editor v1.8
38 CVE-2016-1000122 89 Sql XSS 2016-10-27 2016-12-22
6.5
None Remote Low Single system Partial Partial Partial
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
39 CVE-2016-1000121 79 XSS 2016-10-27 2016-11-28
3.5
None Remote Medium Single system None Partial None
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
40 CVE-2016-1000120 89 Sql XSS 2016-10-27 2016-12-22
6.5
None Remote Low Single system Partial Partial Partial
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
41 CVE-2016-1000119 79 XSS 2016-10-21 2017-01-17
6.5
None Remote Low Single system Partial Partial Partial
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
42 CVE-2016-1000118 79 XSS 2016-10-21 2016-12-22
6.5
None Remote Low Single system Partial Partial Partial
XSS & SQLi in HugeIT slideshow v1.0.4
43 CVE-2016-1000117 79 XSS 2016-10-21 2017-01-05
6.5
None Remote Low Single system Partial Partial Partial
XSS & SQLi in HugeIT slideshow v1.0.4
44 CVE-2016-1000116 79 Sql XSS 2016-10-21 2016-11-28
6.5
None Remote Low Single system Partial Partial Partial
Huge-IT Portfolio Gallery manager v1.1.5 SQL Injection and XSS
45 CVE-2016-1000115 79 Sql XSS 2016-10-21 2016-12-22
6.5
None Remote Low Single system Partial Partial Partial
Huge-IT Portfolio Gallery manager v1.1.5 SQL Injection and XSS
46 CVE-2016-1000114 79 XSS 2016-10-06 2016-11-28
4.3
None Remote Medium Not required None Partial None
XSS in huge IT gallery v1.1.5 for Joomla
47 CVE-2016-1000113 89 Sql XSS 2016-10-06 2016-11-28
7.5
None Remote Low Not required Partial Partial Partial
XSS and SQLi in huge IT gallery v1.1.5 for Joomla
48 CVE-2016-1000007 79 XSS 2016-10-07 2016-11-07
4.3
None Remote Medium Not required None Partial None
Pagure 2.2.1 XSS in raw file endpoint
49 CVE-2016-10112 79 XSS 2017-01-03 2017-01-12
3.5
None Remote Medium Single system None Partial None
Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.6.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML by providing crafted tax-rate table values in CSV format.
50 CVE-2016-10083 79 XSS 2016-12-30 2017-01-03
4.3
None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in a certain error case.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.