Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,863 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57763 |
medium | 6.5 | 0.0022 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions. | |
CVE-2026-57764 |
medium | 6.5 | 0.0022 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions. | |
CVE-2026-57365 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57391 |
medium | 6.5 | 0.0024 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57402 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57414 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57420 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57693 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57711 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57780 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57783 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-27403 |
medium | 6.5 | 0.0022 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57373 |
medium | 6.5 | 0.0022 | 2026-07-23 | Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions. | |
CVE-2026-57384 |
medium | 6.5 | 0.0022 | 2026-07-23 | Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions. | |
CVE-2026-59513 |
medium | 6.5 | 0.0022 | 2026-07-23 | Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions. | |
CVE-2026-65449 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions. | |
CVE-2026-65465 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions. | |
CVE-2026-65470 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions. | |
CVE-2026-65473 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions. | |
CVE-2026-65475 |
medium | 6.5 | 0.0022 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-65480 |
medium | 6.5 | 0.0022 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-65514 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Appointment Hour Booking <= 1.5.86 versions. | |
CVE-2026-65518 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions. | |
CVE-2026-65519 |
medium | 6.5 | 0.0022 | 2026-07-23 | Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions. | |
CVE-2026-65522 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPre | |
CVE-2026-65527 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions. | |
CVE-2026-65528 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions. | |
CVE-2026-65533 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions. | |
CVE-2026-59559 |
medium | 6.5 | 0.0022 | 2026-07-27 | Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenb | |
CVE-2026-65562 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions. | |
CVE-2026-66433 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions. | |
CVE-2026-66434 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others < | |
CVE-2026-66445 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions. | |
CVE-2026-66448 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions. | |
CVE-2026-28178 |
medium | 6.5 | 0.0022 | 2026-08-06 | Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions. | |
CVE-2026-61959 |
medium | 6.5 | 0.0022 | 2026-08-06 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions. | |
CVE-2026-66688 |
medium | 6.5 | 0.0022 | 2026-08-06 | Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions. | |
CVE-2026-66703 |
medium | 6.5 | 0.0022 | 2026-08-06 | Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions. | |
CVE-2026-27537 |
medium | 6.5 | 0.0022 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions. | |
CVE-2026-28182 |
medium | 6.5 | 0.0022 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions. | |
CVE-2026-66467 |
medium | 6.5 | 0.0022 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions. | |
CVE-2026-66471 |
medium | 6.5 | 0.0022 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions. | |
CVE-2026-66687 |
medium | 6.5 | 0.0022 | 2026-08-13 | Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions. | |
CVE-2026-73340 |
medium | 6.5 | 0.0022 | 2026-08-13 | Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions. | |
CVE-2026-73357 |
medium | 6.5 | 0.0022 | 2026-08-13 | Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions. | |
CVE-2026-66637 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions. | |
CVE-2026-66638 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions. | |
CVE-2026-66639 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 | |
CVE-2026-66640 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions. | |
CVE-2026-66641 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions. |