Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,873 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-73357 |
medium | 6.5 | 0.0022 | 2026-08-13 | Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions. | |
CVE-2026-66637 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions. | |
CVE-2026-66638 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions. | |
CVE-2026-66639 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 | |
CVE-2026-66640 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions. | |
CVE-2026-66641 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions. | |
CVE-2026-66643 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions. | |
CVE-2026-66644 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions. | |
CVE-2026-66645 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions. | |
CVE-2026-66646 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions. | |
CVE-2026-68565 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions. | |
CVE-2026-73359 |
medium | 6.5 | 0.0022 | 2026-08-18 | Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 | |
CVE-2026-66603 |
medium | 6.5 | 0.0022 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-66591 |
medium | 6.5 | 0.0022 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-97301 |
medium | 6.5 | 0.0017 | 2026-09-30 | Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions. | |
CVE-2026-114128 |
medium | 6.5 | 0.0032 | 2026-10-21 | Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering | |
CVE-2026-112867 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114184 |
medium | 6.5 | 0.0018 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112845 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114700 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114701 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114702 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114703 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114693 |
medium | 6.5 | 0.0018 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114194 |
medium | 6.5 | 0.0018 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112865 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114709 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115602 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115613 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-97254 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114707 |
medium | 6.5 | 0.0018 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114708 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115950 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115951 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115953 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115955 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115956 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115961 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114710 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116395 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116396 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115966 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116398 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116400 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116408 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-118087 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-118094 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-24533 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-48196 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-52709 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i |