Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Unclassified HIGH 7.1
CVE-2026-25373

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProgressionStudios Vayvo vayvo-progression allo…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25376

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix Addon Jobsearch Chat addon-jobsearch-cha…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25352

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyDecor mydecor allows Reflected XSS.T…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25353

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Nooni nooni allows Reflected XSS.This …

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25354

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Reebox reebox allows Reflected XSS.Thi…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified MEDIUM 6.5
CVE-2026-25355

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Sanzo sanzo allows Stored XSS.This iss…

Mitigation only
Fix from $1,600 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25356

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Yobazar yobazar allows Reflected XSS.T…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25346

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ Builder AYS faq-builder-ays allows …

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25347

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acato WP REST Cache wp-rest-cache allows Stored…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25349

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Loobek loobek allows Reflected XSS.Thi…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25350

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Miti miti allows Reflected XSS.This is…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25351

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyMedi mymedi allows Reflected XSS.Thi…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25341

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RSJoomla! RSFirewall! rsfirewall allows Stored …

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25342

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflec…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25033

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uixthemes Motta Addons motta-addons allows Refl…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25304

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Jaroti jaroti allows Reflected XSS.Thi…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25306

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflec…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25018

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan NaturaLife Extensions naturalife-extensi…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRestaurants vikrestaurants allows R…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25013

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WHMCSdes Phox Hosting phox-host allows Reflecte…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-24979

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobica Core jobica-core allows Reflect…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-24980

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Visionary Core noo-visionary-core allo…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-24983

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Refle…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-24973

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme CitiLights noo-citilights allows Refle…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-24975

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Organici Library noo-organici-library …

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-24391

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeMakers Car Dealer cardealer allows Reflect…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified MEDIUM 6.5
CVE-2026-24370

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme-one The Grid the-grid allows Stored XSS.T…

Mitigation only
Fix from $1,600 2026-03-25
Unclassified HIGH 7.1
CVE-2026-23807

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Socio WP Telegram Widget and Join Link wptel…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-23973

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo golo allows Reflected XSS.This issue…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-23979

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Softwebmedia Gyan Elements gyan-elements allows…

Mitigation only
Fix from $1,950 2026-03-25