U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): xss
  • Search Type: Search All
There are 7,358 matching records.
Displaying matches 221 through 240.
Vuln ID Summary CVSS Severity
CVE-2024-31112

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stephanie Leary Convert Post Types allows Reflected XSS.This issue affects Convert Post Types: from n/a through 1.4.

Published: March 31, 2024; 3:15:48 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-31110

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Katz Web Services, Inc. Contact Form 7 Newsletter allows Reflected XSS.This issue affects Contact Form 7 Newsletter: from n/a through 2.2.

Published: March 31, 2024; 3:15:48 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-31108

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iFlyChat Team iFlyChat – WordPress Chat iflychat allows Stored XSS.This issue affects iFlyChat – WordPress Chat: from n/a through 4.7.2.

Published: March 31, 2024; 3:15:48 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-31107

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DiSo Development Team OpenID allows Reflected XSS.This issue affects OpenID: from n/a through 3.6.1.

Published: March 31, 2024; 3:15:48 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-31106

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yooslider Yoo Slider allows Reflected XSS.This issue affects Yoo Slider: from n/a through 2.1.1.

Published: March 31, 2024; 3:15:48 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30443

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Testimonial Slider allows Stored XSS.This issue affects GS Testimonial Slider: from n/a through 3.1.4.

Published: March 29, 2024; 2:15:14 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30442

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.8.0.

Published: March 29, 2024; 2:15:13 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30441

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post Grid allows Reflected XSS.This issue affects Post Grid: from n/a through 2.2.74.

Published: March 29, 2024; 2:15:13 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30440

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Themify Event Post allows Stored XSS.This issue affects Themify Event Post: from n/a through 1.2.7.

Published: March 29, 2024; 2:15:12 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30439

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BestWebSoft Limit Attempts by BestWebSoft allows Reflected XSS.This issue affects Limit Attempts by BestWebSoft: from n/a through 1.2.9.

Published: March 29, 2024; 2:15:12 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30438

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Print Page block allows Stored XSS.This issue affects Print Page block: from n/a through 1.0.8.

Published: March 29, 2024; 2:15:11 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30437

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL Webinar and Video Conference with Jitsi Meet allows Stored XSS.This issue affects Webinar and Video Conference with Jitsi Meet: from n/a through 2.6.3.

Published: March 29, 2024; 2:15:11 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30436

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Collect.Chat Inc. Collectchat allows Stored XSS.This issue affects Collectchat: from n/a through 2.4.1.

Published: March 29, 2024; 2:15:10 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30435

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Blocks for Block Editor | Gutenberg allows Reflected XSS.This issue affects The Plus Blocks for Block Editor | Gutenberg: from n/a through 3.2.5.

Published: March 29, 2024; 2:15:10 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30434

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP-CRM System allows Stored XSS.This issue affects WP-CRM System: from n/a through 3.2.9.

Published: March 29, 2024; 2:15:09 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30433

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Stored XSS.This issue affects WC Marketplace: from n/a through 4.1.3.

Published: March 29, 2024; 2:15:09 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30432

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Slider - Slider for your block editor allows Stored XSS.This issue affects B Slider - Slider for your block editor: from n/a through 1.1.12.

Published: March 29, 2024; 2:15:08 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30431

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hometory Mang Board WP allows Reflected XSS.This issue affects Mang Board WP: from n/a through 1.8.0.

Published: March 29, 2024; 2:15:08 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30452

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder allows Stored XSS.This issue affects Landing Page Builder: from n/a through 1.5.1.7.

Published: March 29, 2024; 1:15:16 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30451

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in INFINITUM FORM Geo Controller allows Stored XSS.This issue affects Geo Controller: from n/a through 8.6.4.

Published: March 29, 2024; 1:15:16 PM -0400 		V3.x:(not available)
 V2.0:(not available)