CWE-80: CWE-80

This Cross-Site Scripting (XSS) vulnerability in Everest Forms WordPress plugin allows attackers to inject malicious scripts into web pages. It affect...

This Cross-Site Scripting (XSS) vulnerability in the DeepDigital WordPress theme allows attackers to inject malicious scripts into web pages. It affec...

This is a cross-site scripting (XSS) vulnerability in the Norebro Extra WordPress plugin that allows attackers to inject malicious scripts into web pa...

This vulnerability allows attackers to inject malicious scripts into web pages using the Contact Form 7 Dynamic Text Extension WordPress plugin. When ...

This Cross-Site Scripting (XSS) vulnerability in the XStore WordPress theme allows attackers to inject malicious scripts into web pages. It affects al...

This vulnerability allows attackers to inject malicious scripts into web pages using the Cozy Blocks WordPress plugin. It affects all WordPress sites ...

This Cross-Site Scripting (XSS) vulnerability in the AWP Classifieds WordPress plugin allows attackers to inject malicious scripts into web pages. It ...

A HTML injection vulnerability in PHPGurukul User Registration & Login and User Management System V3.3 allows remote attackers to inject arbitrary HTM...

This vulnerability allows attackers to inject malicious scripts into web forms created with the ARForms Form Builder WordPress plugin. When exploited,...

This vulnerability allows attackers to inject malicious HTML/JavaScript code into Spectra WordPress plugin pages through unauthenticated email input. ...

This vulnerability allows attackers to inject malicious scripts into web pages using the CP Polls WordPress plugin. When exploited, it can lead to cro...

This vulnerability allows HTML injection through JetBrains IntelliJ IDEA's Remote Development feature, enabling attackers to inject malicious HTML con...

This Cross-Site Scripting (XSS) vulnerability in spacewalk-java allows attackers to inject malicious JavaScript into web pages. When exploited, it can...

This CVE describes a basic cross-site scripting (XSS) vulnerability in spacewalk-java that allows attackers to inject and execute arbitrary JavaScript...

An authenticated cross-site scripting (XSS) vulnerability in Cisco ISE and ISE-PIC web management interfaces allows attackers with administrative cred...

IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6 are vulnerable to HTML injection, allowing attackers to inject malicious HTML that executes in vic...

This vulnerability allows authenticated users with Global Settings permissions to inject malicious HTML/JavaScript into the Crash Report URL field, cr...

This vulnerability allows attackers to inject malicious scripts into WP Recipe Maker web pages through improper HTML tag neutralization. It affects Wo...

This CSRF vulnerability in WordPress Automatic Plugin allows attackers to trick administrators into performing unauthorized actions, potentially injec...

HCL Unica MaxAI Assistant has a HTML injection vulnerability where attackers can inject malicious HTML/JavaScript that executes in users' browsers. Th...

HCL MyXalytics v6.6 has an HTML injection vulnerability where untrusted input isn't properly sanitized before being included in web output. This allow...

The Key Figures WordPress plugin has a stored XSS vulnerability that allows administrators to inject malicious scripts into pages. When users visit co...

The Amazon affiliate lite WordPress plugin has a stored XSS vulnerability in admin settings that allows authenticated administrators to inject malicio...

OctoPrint versions 1.11.3 and below contain a cross-site scripting (XSS) vulnerability in Action Command notifications and prompts. An attacker can cr...

This CVE describes a cross-site scripting (XSS) vulnerability in the Textmetrics WordPress plugin that allows attackers to inject malicious scripts in...

This vulnerability allows attackers to inject malicious HTML/JavaScript into Tutor LMS web pages through improper input sanitization. It affects all W...

This vulnerability allows attackers to inject malicious scripts into wpForo Forum WordPress plugin pages through improper HTML tag neutralization. It ...

This vulnerability in EZ-Suite EZ-Partner 5 allows attackers to inject malicious scripts via the Forgot Password Handler component, leading to basic c...

CVE-2024-34398 is a stored HTML injection vulnerability in BMC Remedy Mid Tier 7.6.04 that allows authenticated attackers to inject malicious HTML con...

ERPNext versions through 15.88.1 fail to sanitize HTML <a> tags in plain text fields, allowing attackers to inject clickable links into generated PDF ...

SAP BusinessObjects Business Intelligence Platform (Web Intelligence) has an HTML injection vulnerability that allows authenticated users to inject ma...

OpenProject versions before 16.6.7 and 17.0.3 contain an HTML injection vulnerability in the time tracking function. An attacker with administrator pr...