CWE-79

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nikhil Vaghela’s Add User Role plugin <= 0.0.1 at WordPress.

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christian Salazar’s add2fav plugin <= 1.0 at WordPress.

Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.

Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Galerio & Urda’s Better Delete Revision plugin <= 1.6.1 at WordPress.

Silverstripe silverstripe/cms through 4.11.0 allows XSS.