Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,863 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57762 |
medium | 5.9 | 0.0024 | 2026-07-02 | Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions. | |
CVE-2026-48949 |
medium | 5.9 | 0.0024 | 2026-07-07 | Lack of validation leads to an XSS vulnerability in the MFA management views. | |
CVE-2026-48950 |
medium | 5.9 | 0.0024 | 2026-07-07 | Lack of escaping leads to an XSS vulnerability in the file management view of com_templates. | |
CVE-2026-48951 |
medium | 5.9 | 0.0024 | 2026-07-07 | Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components. | |
CVE-2026-48952 |
medium | 5.9 | 0.0024 | 2026-07-07 | Lack of escaping leads to an XSS vulnerability in the update list view of com_installer. | |
CVE-2026-48953 |
medium | 5.9 | 0.0024 | 2026-07-07 | Lack of escaping leads to an XSS vulnerability in the generic image output layout. | |
CVE-2026-48954 |
medium | 5.9 | 0.0024 | 2026-07-07 | Improper validation leads to a generic XSS vector in the language override feature. | |
CVE-2026-24628 |
medium | 5.9 | 0.0024 | 2026-07-23 | Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic <= 1.16.3 versions. | |
CVE-2026-65483 |
medium | 5.9 | 0.0024 | 2026-07-23 | Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions. | |
CVE-2026-65534 |
medium | 5.9 | 0.0024 | 2026-07-23 | Author Cross Site Scripting (XSS) in Custom links in Elementor Image Carousel <= 1.1.1 versions. | |
CVE-2026-65538 |
medium | 5.9 | 0.0024 | 2026-07-23 | Author Cross Site Scripting (XSS) in Machete <= 5.2 versions. | |
CVE-2026-65550 |
medium | 5.9 | 0.0024 | 2026-07-23 | Shop Manager Cross Site Scripting (XSS) in Tabs <= 2.5 versions. | |
CVE-2026-65563 |
medium | 5.9 | 0.0024 | 2026-07-27 | Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions. | |
CVE-2026-66475 |
medium | 5.9 | 0.0024 | 2026-07-27 | Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – Checkout Ma | |
CVE-2026-28179 |
medium | 5.9 | 0.0024 | 2026-08-06 | Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions. | |
CVE-2026-66706 |
medium | 5.9 | 0.0024 | 2026-08-06 | Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions. | |
CVE-2026-73344 |
medium | 5.9 | 0.0024 | 2026-08-13 | Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. | |
CVE-2026-27365 |
medium | 5.9 | 0.0024 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57691 |
medium | 5.8 | 0.0020 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-50571 |
medium | 5.7 | 0.0023 | 2026-10-27 | WebSub is a W3C recommendation produced by the Social Web Working Group. In recommendation REC-websu | |
CVE-2026-87099 |
medium | 5.7 | 0.0024 | 2026-10-28 | Cross-site scripting (XSS) vulnerability due to improper input validation. The following products ar | |
CVE-2026-35451 |
medium | 5.7 | 0.0031 | 2026-04-21 | Twenty is an open source CRM. Prior to 1.20.6, a Stored Cross-Site Scripting (XSS) vulnerability exi | |
CVE-2026-41250 |
medium | 5.7 | 0.0028 | 2026-05-11 | Taiga is a project management platform for startups and agile developers. Prior 6.9.1, Taiga front i | |
CVE-2026-12425 |
medium | 5.7 | 0.0015 | 2026-06-16 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-44696 |
medium | 5.7 | 0.0025 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenProject's ri | |
CVE-2026-57213 |
medium | 5.7 | 0.0025 | 2026-07-10 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbi | |
CVE-2026-76303 |
medium | 5.7 | 0.0023 | 2026-10-21 | In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could | |
CVE-2026-55600 |
medium | 5.7 | 0.0030 | 2026-10-23 | Part-DB is an open source inventory management system for electronic components. Prior to version 2. | |
CVE-2026-8296 |
medium | 5.6 | 0.0032 | 2026-06-19 | In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-S | |
CVE-2026-115425 |
medium | 5.6 | 0.0029 | 2026-10-26 | Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall vesrion 26.7.1_1 and ea | |
CVE-2026-9007 |
medium | 5.5 | 0.0044 | 2026-07-15 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i | |
CVE-2026-95717 |
medium | 5.5 | 0.0027 | 2026-10-22 | A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AO | |
CVE-2023-0025 |
medium | 5.4 | 0.0034 | 2023-02-14 | SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a ma | |
CVE-2023-0902 |
medium | 5.4 | 0.0269 | 2023-02-18 | A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified | |
CVE-2023-23815 |
medium | 5.4 | 0.0039 | 2023-04-06 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Jackson Multi-column Ta | |
CVE-2024-11831 |
medium | 5.4 | 0.0112 | 2025-02-10 | A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascr | |
CVE-2025-50363 |
medium | 5.4 | 0.0025 | 2025-11-03 | Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hi | |
CVE-2025-57244 |
medium | 5.4 | 0.0022 | 2025-11-05 | OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user accou | |
CVE-2024-33724 |
medium | 5.4 | 0.0063 | 2026-05-08 | SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to proces | |
CVE-2024-31027 |
medium | 5.4 | 0.0026 | 2026-09-29 | Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 | |
CVE-2026-114133 |
medium | 5.4 | 0.0022 | 2026-10-21 | Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-isl | |
CVE-2026-93633 |
medium | 5.4 | 0.0023 | 2026-10-23 | A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user wi | |
CVE-2026-100175 |
medium | 5.4 | 0.0033 | 2026-10-28 | The Postie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Body URL Auto | |
CVE-2026-116761 |
medium | 5.4 | 0.0022 | 2026-10-28 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1_grp[0][ | |
CVE-2026-16020 |
medium | 5.4 | 0.0013 | 2026-10-28 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i | |
CVE-2026-58524 |
medium | 5.4 | 0.0041 | 2026-07-03 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed | |
CVE-2023-22972 |
medium | 5.4 | 0.0043 | 2023-02-22 | A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_function | |
CVE-2023-28665 |
medium | 5.4 | 0.0089 | 2023-03-22 | The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-si | |
CVE-2023-28666 |
medium | 5.4 | 0.0044 | 2023-03-22 | The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scri | |
CVE-2025-65675 |
medium | 5.4 | 0.0025 | 2025-11-26 | Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attac |