U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Keyword (text search): xss
There are 7,923 matching records.
Displaying matches 5,321 through 5,340.
Vuln ID Summary CVSS Severity
CVE-2017-18566

The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.

Published: August 20, 2019; 12:15:13 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18533

The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.

Published: August 20, 2019; 12:15:12 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18532

The realty plugin before 1.1.0 for WordPress has multiple XSS issues.

Published: August 20, 2019; 12:15:12 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18531

The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288.

Published: August 20, 2019; 12:15:12 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.

Published: August 20, 2019; 12:15:12 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18529

The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.

Published: August 20, 2019; 12:15:12 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18528

The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.

Published: August 20, 2019; 12:15:12 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.

Published: August 20, 2019; 12:15:12 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18526

The moreads-se plugin before 1.4.7 for WordPress has XSS.

Published: August 20, 2019; 12:15:12 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18524

The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.

Published: August 20, 2019; 12:15:11 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18522

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.

Published: August 20, 2019; 12:15:11 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18519

The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.

Published: August 20, 2019; 12:15:11 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18518

The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.

Published: August 20, 2019; 12:15:11 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2016-10895

The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.

Published: August 20, 2019; 12:15:11 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2016-10892

The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.

Published: August 20, 2019; 12:15:11 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2015-9320

The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.

Published: August 20, 2019; 12:15:11 PM -0400 		V4.0:(not available)
 V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2015-9319

The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.

Published: August 20, 2019; 12:15:11 PM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18568

The my-wp-translate plugin before 1.0.4 for WordPress has XSS.

Published: August 20, 2019; 11:15:12 AM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18567

The wp-all-import plugin before 3.4.6 for WordPress has XSS.

Published: August 20, 2019; 11:15:11 AM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2017-18520

The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.

Published: August 20, 2019; 11:15:11 AM -0400 		V4.0:(not available)
 V3.0: 6.1 MEDIUM
V2.0: 4.3 MEDIUM