U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): xss
  • Search Type: Search All
There are 7,335 matching records.
Displaying matches 321 through 340.
Vuln ID Summary CVSS Severity
CVE-2024-29926

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WC Builder allows Stored XSS.This issue affects WC Builder: from n/a through 1.0.18.

Published: March 27, 2024; 4:15:40 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29925

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate allows Stored XSS.This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through 1.6.6.

Published: March 27, 2024; 4:15:40 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29924

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Premium Packages allows Reflected XSS.This issue affects Premium Packages: from n/a through 5.8.2.

Published: March 27, 2024; 4:15:40 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29923

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PropertyHive allows Reflected XSS.This issue affects PropertyHive: from n/a through 2.0.8.

Published: March 27, 2024; 4:15:39 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29922

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Quantum Cloud Slider Hero allows Stored XSS.This issue affects Slider Hero: from n/a through 8.6.1.

Published: March 27, 2024; 4:15:39 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29921

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Supsystic Photo Gallery by Supsystic allows Stored XSS.This issue affects Photo Gallery by Supsystic: from n/a through 1.15.16.

Published: March 27, 2024; 4:15:39 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29920

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.2.9.

Published: March 27, 2024; 4:15:39 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29919

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Reflected XSS.This issue affects Photo Gallery by Ays: from n/a through 5.5.2.

Published: March 27, 2024; 4:15:38 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29918

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Survey Maker team Survey Maker allows Reflected XSS.This issue affects Survey Maker: from n/a through 4.0.6.

Published: March 27, 2024; 4:15:38 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29917

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Compact WP Audio Player allows Stored XSS.This issue affects Compact WP Audio Player: from n/a through 1.9.9.

Published: March 27, 2024; 4:15:38 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30201

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Reflected XSS.This issue affects WordPress Importer: from n/a through 1.0.4.

Published: March 27, 2024; 3:15:59 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30199

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for Amazon allows Reflected XSS.This issue affects WP-Lister Lite for Amazon: from n/a through 2.6.8.

Published: March 27, 2024; 3:15:58 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30198

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeKraft BuddyForms allows Reflected XSS.This issue affects BuddyForms: from n/a through 2.8.5.

Published: March 27, 2024; 3:15:57 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30197

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Stored XSS.This issue affects Church Admin: from n/a through 4.0.26.

Published: March 27, 2024; 3:15:57 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30196

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Appscreo Easy Social Share Buttons allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 9.4.

Published: March 27, 2024; 3:15:56 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30195

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Semenov New RoyalSlider allows Reflected XSS.This issue affects New RoyalSlider: from n/a through 3.4.2.

Published: March 27, 2024; 3:15:55 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30194

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Sunshine Sunshine Photo Cart allows Reflected XSS.This issue affects Sunshine Photo Cart: from n/a through 3.1.1.

Published: March 27, 2024; 3:15:55 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30193

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Stored XSS.This issue affects Church Admin: from n/a through 4.1.17.

Published: March 27, 2024; 3:15:54 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-30192

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Pins for Pinterest allows Stored XSS.This issue affects GS Pins for Pinterest: from n/a through 1.8.2.

Published: March 27, 2024; 3:15:54 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-29915

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Podlove Podlove Podcast Publisher allows Reflected XSS.This issue affects Podlove Podcast Publisher: from n/a through 4.0.9.

Published: March 27, 2024; 3:15:53 AM -0400 		V3.x:(not available)
 V2.0:(not available)