CWE-82
9 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 9Published CVEs9 of them scored
- 2Last 12 monthspublished in the last year
- 5Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-54423
OpenMage magento-lts before 20.2.0 Stored XSS via TinyMCE WYSIWYG Editor
OpenMage · magento-lts
High8.3 - CVE-2026-56735
Zammad: Improper neutralization of `srcset` attribute in IMG tags in Zammad
zammad · zammad
Medium5.3 - CVE-2025-53194
WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability
Crocoblock · JetEngine
High8.5 - CVE-2024-52427
WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability
Vollstart · Event Tickets with Ticket Scanner
Critical9.9 - CVE-2024-52434
WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability
supsystic · Popup by Supsystic
Critical9.1 - CVE-2024-52393
WordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability
Eric Teubert · Podlove Podcast Publisher
Critical9.1 - CVE-2024-48042
WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability
supsystic · Contact Form by Supsystic
Critical9.1 - CVE-2024-49271
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability
Unlimited Elements · Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
Critical9.1 - CVE-2023-30963
Stored XSS in Foundry Slate Query Dropdown menu
Palantir · com.palantir.foundry:foundry-frontend
Medium5.4