Weaknesses of type CWE-79

26,130 results
CVE-2025-58747LOWDify MCP OAuth Flow Vulnerable to XSSEPSS 5.2%CVE-2023-4116MEDIUMPHP Jabbers Taxi Booking index.php cross site scriptingEPSS 5.2%CVE-2023-4112MEDIUMPHP Jabbers Shuttle Booking Software index.php cross site scriptingEPSS 5.2%CVE-2023-4115MEDIUMPHP Jabbers Cleaning Business index.php cross site scriptingEPSS 5.2%CVE-2023-4113MEDIUMPHP Jabbers Service Booking Script index.php cross site scriptingEPSS 5.2%CVE-2023-45136CRITICALXWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabledEPSS 5.2%CVE-2020-27659HIGHMultiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web EPSS 5.1%CVE-2023-4114MEDIUMPHP Jabbers Night Club Booking Software index.php cross site scriptingEPSS 5.1%CVE-2023-29983MEDIUMCross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog EPSS 5.1%CVE-2022-2941MEDIUMWP-UserOnline <= 2.88.0 - Authenticated (Admin+) Stored Cross-Site ScriptingEPSS 5.1%CVE-2021-24904—Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site ScriptingEPSS 5.1%CVE-2021-24901—Security Audit <= 1.0.0 - Admin+ Stored Cross Site ScriptingEPSS 5.1%CVE-2025-34309MEDIUMIPFire < v2.29 Stored XSS via Dynamic DNS HostEPSS 5.0%CVE-2025-34301MEDIUMIPFire < v2.29 Stored XSS via Location Group CreationEPSS 5.0%CVE-2021-22510—Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 aEPSS 5.0%CVE-2022-1001—WP Downgrade < 1.2.3 - Admin+ Stored Cross-Site ScriptingEPSS 4.9%CVE-2022-2383—Feed Them Social < 3.0.1 - Reflected Cross-Site ScriptingEPSS 4.9%CVE-2021-24247—Contact Form Check Tester <= 1.0.2 - Broken Access Control to Cross-Site Scripting (XSS)EPSS 4.7%CVE-2025-54252MEDIUMAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 4.6%CVE-2022-1022HIGHCross-site Scripting (XSS) - Stored in chatwoot/chatwootEPSS 4.5%