Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,878 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-56056 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-48195 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-54862 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116857 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-110881 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116849 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116850 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-118095 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-39737 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-39742 |
medium | 6.5 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115610 |
medium | 6.5 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-118097 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114706 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-54865 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions. | |
CVE-2026-116848 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-111088 |
medium | 6.5 | 0.0022 | 2026-10-20 | A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. | |
CVE-2026-119370 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-65444 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-119369 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-107625 |
medium | 6.4 | 0.0019 | 2026-10-28 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Mem | |
CVE-2026-109209 |
medium | 6.4 | 0.0021 | 2026-10-28 | The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plug | |
CVE-2026-109974 |
medium | 6.4 | 0.0019 | 2026-10-28 | The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plug | |
CVE-2026-111727 |
medium | 6.4 | 0.0021 | 2026-10-28 | The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting v | |
CVE-2026-103370 |
medium | 6.4 | 0.0026 | 2026-10-28 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stor | |
CVE-2026-103996 |
medium | 6.4 | 0.0024 | 2026-10-28 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vu | |
CVE-2026-104729 |
medium | 6.4 | 0.0016 | 2026-10-28 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the | |
CVE-2026-104740 |
medium | 6.4 | 0.0024 | 2026-10-28 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vu | |
CVE-2026-107710 |
medium | 6.4 | 0.0020 | 2026-10-28 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to | |
CVE-2026-108366 |
medium | 6.4 | 0.0021 | 2026-10-28 | The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin | |
CVE-2026-109370 |
medium | 6.4 | 0.0022 | 2026-10-28 | The Document Embedder – let visitors read files without downloading plugin for WordPress is vulnerab | |
CVE-2026-109385 |
medium | 6.4 | 0.0026 | 2026-10-28 | The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for Wor | |
CVE-2026-109590 |
medium | 6.4 | 0.0024 | 2026-10-28 | The Tour Booking Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' | |
CVE-2026-109972 |
medium | 6.4 | 0.0027 | 2026-10-28 | The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access | |
CVE-2026-109975 |
medium | 6.4 | 0.0020 | 2026-10-28 | The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Template | |
CVE-2026-109978 |
medium | 6.4 | 0.0024 | 2026-10-28 | The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Template | |
CVE-2026-110071 |
medium | 6.4 | 0.0020 | 2026-10-28 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' par | |
CVE-2026-116749 |
medium | 6.4 | 0.0019 | 2026-10-28 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site | |
CVE-2026-118164 |
medium | 6.4 | 0.0021 | 2026-10-28 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vu | |
CVE-2026-77188 |
medium | 6.4 | 0.0019 | 2026-10-28 | The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Stored Cro | |
CVE-2026-77871 |
medium | 6.4 | 0.0024 | 2026-10-28 | The Post Snippets – Custom WordPress Code Snippets Customizer plugin for WordPress is vulnerable to | |
CVE-2026-93293 |
medium | 6.4 | 0.0019 | 2026-10-29 | The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bun | |
CVE-2026-5070 |
medium | 6.4 | 0.0019 | 2026-04-16 | The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery block text | |
CVE-2026-40282 |
medium | 6.4 | 0.0026 | 2026-04-17 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site | |
CVE-2026-23758 |
medium | 6.4 | 0.0015 | 2026-04-20 | GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the ticket subjec | |
CVE-2026-42870 |
medium | 6.4 | 0.0035 | 2026-05-11 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a Stored Cross-Site | |
CVE-2026-43876 |
medium | 6.4 | 0.0019 | 2026-05-11 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/notifySu | |
CVE-2026-6646 |
medium | 6.4 | 0.0028 | 2026-05-15 | The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dt_default_button | |
CVE-2026-48167 |
medium | 6.4 | 0.0025 | 2026-06-22 | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 un | |
CVE-2026-52781 |
medium | 6.4 | 0.0025 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the H | |
CVE-2026-5220 |
medium | 6.4 | 0.0025 | 2026-07-01 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i |