CWE-85 · Cross-site Scripting
Doubled Character XSS Manipulations
2CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
2 CVEs with CWE-85 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-41676TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site ScriptingTEAM JOHNLONG SOFTWARE CO., LTD. · MAILD Mail Server · CVSS 5.4 · 2022-11-29 | 5.4 | 0.5% | 2022-11-29 |
| CVE-2024-13721Plethora Plugins Tabs + Accordions <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via anchorplethoraplugins · Plethora Plugins Tabs + Accordions · CVSS 6.4 · 2025-01-25 | 6.4 | 0.3% | 2025-01-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.