CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   

Security Vulnerabilities Published In 2016(Cross Site Scripting (XSS))

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2016-1000155 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin wpsolr-search-engine v7.6
2 CVE-2016-1000154 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin whizz v1.0.7
3 CVE-2016-1000153 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin tidio-gallery v1.1
4 CVE-2016-1000152 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin tidio-form v1.0
5 CVE-2016-1000151 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin tera-charts v1.0
6 CVE-2016-1000150 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin simplified-content v1.0.0
7 CVE-2016-1000149 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin simpel-reserveren v3.5.2
8 CVE-2016-1000148 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin s3-video v0.983
9 CVE-2016-1000147 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin recipes-writer v1.0.4
10 CVE-2016-1000146 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin pondol-formmail v1.1
11 CVE-2016-1000145 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin pondol-carousel v1.0
12 CVE-2016-1000144 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin photoxhibit v2.1.8
13 CVE-2016-1000143 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin photoxhibit v2.1.8
14 CVE-2016-1000142 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin parsi-font v4.2.5
15 CVE-2016-1000141 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin page-layout-builder v1.9.3
16 CVE-2016-1000140 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin new-year-firework v1.1.9
17 CVE-2016-1000139 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin infusionsoft v1.5.11
18 CVE-2016-1000138 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin indexisto v1.0.5
19 CVE-2016-1000137 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin hero-maps-pro v2.1.0
20 CVE-2016-1000136 79 XSS 2016-10-10 2022-04-21
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin heat-trackr v1.0
21 CVE-2016-1000135 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin hdw-tube v1.2
22 CVE-2016-1000134 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin hdw-tube v1.2
23 CVE-2016-1000133 79 XSS 2016-10-10 2022-04-21
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1
24 CVE-2016-1000132 79 XSS 2016-10-10 2021-10-12
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
25 CVE-2016-1000131 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin e-search v1.0
26 CVE-2016-1000130 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin e-search v1.0
27 CVE-2016-1000129 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin defa-online-image-protector v3.3
28 CVE-2016-1000128 79 XSS 2016-10-10 2016-12-22
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin anti-plagiarism v3.60
29 CVE-2016-1000127 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin ajax-random-post v2.00
30 CVE-2016-1000126 79 XSS 2016-10-10 2016-11-28
4.3
 None Remote Medium Not required None Partial None
Reflected XSS in wordpress plugin admin-font-editor v1.8
31 CVE-2016-1000122 89 Sql XSS 2016-10-27 2016-12-22
6.5
 None Remote Low ??? Partial Partial Partial
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
32 CVE-2016-1000121 79 XSS 2016-10-27 2016-11-28
3.5
 None Remote Medium ??? None Partial None
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
33 CVE-2016-1000120 89 Sql XSS 2016-10-27 2016-12-22
6.5
 None Remote Low ??? Partial Partial Partial
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
34 CVE-2016-1000119 79 XSS 2016-10-21 2018-05-02
6.5
 None Remote Low ??? Partial Partial Partial
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
35 CVE-2016-1000118 79 XSS 2016-10-21 2018-05-02
6.5
 None Remote Low ??? Partial Partial Partial
XSS & SQLi in HugeIT slideshow v1.0.4
36 CVE-2016-1000117 79 XSS 2016-10-21 2017-01-06
6.5
 None Remote Low ??? Partial Partial Partial
XSS & SQLi in HugeIT slideshow v1.0.4
37 CVE-2016-1000116 79 Sql XSS 2016-10-21 2017-03-28
6.5
 None Remote Low ??? Partial Partial Partial
Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS
38 CVE-2016-1000115 79 Sql XSS 2016-10-21 2017-11-13
6.5
 None Remote Low ??? Partial Partial Partial
Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS
39 CVE-2016-1000114 79 XSS 2016-10-06 2019-12-19
4.3
 None Remote Medium Not required None Partial None
XSS in huge IT gallery v1.1.5 for Joomla
40 CVE-2016-1000113 89 Sql XSS 2016-10-06 2019-12-19
7.5
 None Remote Low Not required Partial Partial Partial
XSS and SQLi in huge IT gallery v1.1.5 for Joomla
41 CVE-2016-1000007 79 XSS 2016-10-07 2020-05-14
4.3
 None Remote Medium Not required None Partial None
Pagure 2.2.1 XSS in raw file endpoint
42 CVE-2016-10083 79 XSS 2016-12-30 2017-01-03
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in a certain error case.
43 CVE-2016-10006 79 XSS Bypass 2016-12-24 2019-11-14
4.3
 None Remote Medium Not required None Partial None
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.
44 CVE-2016-9998 79 XSS 2016-12-17 2017-07-27
4.3
 None Remote Medium Not required None Partial None
SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin.php involving the `$plugin` parameter, as demonstrated by a /ecrire/?exec=info_plugin URL.
45 CVE-2016-9997 79 XSS 2016-12-17 2017-07-27
4.3
 None Remote Medium Not required None Partial None
SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/puce_statut.php involving the `$id` parameter, as demonstrated by a /ecrire/?exec=puce_statut URL.
46 CVE-2016-9891 79 XSS 2016-12-29 2017-01-03
3.5
 None Remote Medium ??? None Partial None
Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or media_title parameter (aka the media title).
47 CVE-2016-9889 79 XSS 2016-12-23 2017-07-27
4.3
 None Remote Medium Not required None Partial None
Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS.
48 CVE-2016-9857 79 XSS 2016-12-11 2017-07-01
4.3
 None Remote Medium Not required None Partial None
An issue was discovered in phpMyAdmin. XSS is possible because of a weakness in a regular expression used in some JavaScript processing. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
49 CVE-2016-9856 79 XSS 2016-12-11 2017-07-01
4.3
 None Remote Medium Not required None Partial None
An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10. This issue is resolved by using a copy of a hash to avoid a race condition. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
50 CVE-2016-9757 79 XSS 2016-12-20 2016-12-27
3.5
 None Remote Medium ??? None Partial None
In the Create Tags page of the Rapid7 Nexpose version 6.4.12 user interface, any authenticated user who has the capability to create tags can inject cross-site scripting (XSS) elements in the tag name field. Once this tag is viewed in the Tag Detail page of the Rapid7 Nexpose 6.4.12 UI by another authenticated user, the script is run in that user's browser context.
Total number of vulnerabilities : 498   Page : 1 (This Page)2 3 4 5 6 7 8 9 10
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.