Skip to content

Code-Projects · weakness class

Cross-site Scripting

237 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 237 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary cod…CVE-2025-28121Code-Projects · CVSS 6.1 · 0.9% likely

    CWE-79

  2. code-projects E-Commerce Website user_signup.php cross site scriptingCVE-2023-7108code-projects · CVSS 4.3 · 0.8% likely

    CWE-79

  3. code-projects Job Recruitment _email.php cross site scriptingCVE-2024-12883code-projects · CVSS 4.3 · 0.8% likely

    CWE-79

  4. code-projects Online Shop Store signup.php cross site scriptingCVE-2024-11243code-projects · CVSS 4.3 · 0.7% likely

    CWE-79

  5. code-projects E-Commerce Site search.php cross site scriptingCVE-2023-7124code-projects · CVSS 4.3 · 0.7% likely

    CWE-79

  6. Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-37070Code-Projects · 0.6% likely

    CWE-79

  7. code-projects Online Book System Product.php cross site scriptingCVE-2024-3004code-projects · CVSS 3.5 · 0.6% likely

    CWE-79

  8. code-projects Intern Membership Management System User Registration cross site scriptingCVE-2023-7132code-projects · CVSS 3.5 · 0.6% likely

    CWE-79

  9. code-projects Farmacia usuario.php cross site scriptingCVE-2024-11660code-projects · CVSS 3.5 · 0.6% likely

    CWE-79

  10. code-projects Agro-School Management System btn_functions.php doAddQuestion cross site scriptingCVE-2023-3060code-projects · CVSS 3.5 · 0.6% likely

    CWE-79

  11. code-projects Job Recruitment _call_job_search_ajax.php cross site scriptingCVE-2025-0806code-projects · CVSS 4.3 · 0.6% likely

    CWE-79

  12. code-projects Blood Bank System Login Page login.php cross site scriptingCVE-2024-8174code-projects · CVSS 4.3 · 0.6% likely

    CWE-79

  13. code-projects Online FIR System registercomplaint.php cross site scriptingCVE-2024-0503code-projects · CVSS 3.5 · 0.6% likely

    CWE-79

  14. code-projects Inventory Management Registration Form registration.php cross site scriptingCVE-2024-8605code-projects · CVSS 4.3 · 0.6% likely

    CWE-79

  15. code-projects Hostel Management Site room-details.php cross site scriptingCVE-2024-12790code-projects · CVSS 3.5 · 0.6% likely

    CWE-79

  16. code-projects Farmacia adicionar-cliente.php cross site scriptingCVE-2024-11246code-projects · CVSS 3.5 · 0.6% likely

    CWE-79

  17. code-projects Simple Online Hotel Reservation System Make a Reservation Page add_reserve.php cross site scriptingCVE-2024-0504code-projects · CVSS 3.5 · 0.6% likely

    CWE-79

  18. code-projects Intern Membership Management System Error Message fill_details.php cross site scriptingCVE-2025-8340code-projects · CVSS 4.3 · 0.6% likely

    CWE-79

  19. Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters.CVE-2023-46020Code-Projects · 0.6% likely

    CWE-79

  20. code-projects Hospital Management System Edit Doctor Details Page manage-doctors.php cross site scriptingCVE-2024-12983code-projects · CVSS 2.4 · 0.5% likely

    CWE-79

  21. code-projects Hostel Management System registration.php cross site scriptingCVE-2024-13012code-projects · CVSS 3.5 · 0.5% likely

    CWE-79

  22. Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter.CVE-2023-46019Code-Projects · 0.5% likely

    CWE-79

  23. Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL.CVE-2023-46016Code-Projects · 0.5% likely

    CWE-79

  24. Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL.CVE-2023-46015Code-Projects · 0.5% likely

    CWE-79

  25. code-projects Client Details System regester.php cross site scriptingCVE-2023-7143code-projects · CVSS 2.4 · 0.5% likely

    CWE-79

  26. code-projects Pharmacy Management System Update My Profile Page index.php cross site scriptingCVE-2024-8366code-projects · CVSS 4.3 · 0.5% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.