CVE-2026-59167: Improper Neutralization of Input During Web Page Generation

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/lib/core.js does not consistently reject namespaced or custom HTML elements, allowing event-handler attributes to remain on crafted elements. When an applicati...

CVE-2026-73858: Improper Neutralization of Special Elements Used in a Template Engine

Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted values from public Freeform forms can be evaluated by the isolated Twig renderer when rendered into HTML attributes. An unauthenticated attacker can place Twig expressions in...

CVE-2026-91793: Use After Free

When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotation appearance reconstruction, it accesses an object after it has been released, resulting in a use-after-free...

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162

The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module does not sufficiently restrict access to the custom attributes YAML editor. Users with permission to create or edit webforms but without permission to edit...

CVE-2026-77912

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...

Improper Validation Of Cookie Domain Attributes

Http4s is vulnerable to improper validation of cookie domain attributes. The vulnerability is due to the CookieJar client middleware accepting a response cookie’s Domain attribute without validating that it matches the response host, which allows an attacker controlling or compromising a server t...

CVE-2026-77912: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...

PT-2026-96647

Name of the Vulnerable Software and Affected Versions Contextual Related Posts versions prior to 4.4.2 Description Insufficient input sanitization and output escaping allow authenticated attackers with author-level access and above to perform Stored Cross-Site Scripting. This is achieved by...

CVE-2026-93056

A flaw was found in the Linux kernel. Specifically, within the USB gadget audio class 1 UAC1 legacy driver, a programming error related to handling string attributes could lead to a critical system failure. A local attacker could trigger this vulnerability by attempting to write to certain...

CVE-2026-93339

Metaphor Creations Ditty (WordPress plugin ditty-news-ticker) before 3.1.70 contains a stored XSS vulnerability in the ditty_layout_render_tag_wrapper() function. The function inserts caller-supplied wrapper attribute values directly as HTML element names without allowlist validation , bypassing ...

PT-2026-96105

When a regular user adds a reference between objects or attributes, MISP checks whether the user can access the overall event, but it does not always check whether the individual pieces of data are also allowed for that user. Because of this, someone who can view an event could potentially access...

CVE-2026-14844

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute when the...

EUVD-2026-83660

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute when the...

PT-2026-95913

Name of the Vulnerable Software and Affected Versions Master Slider WordPress plugin versions prior to 3.11.3 Description Insufficient sanitization and escaping of shortcode attributes before they are output in an inline script context allows users with the Contributor role and above to perform...

CVE-2026-14844: Improper Neutralization of Input During Web Page Generation

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute when the...

CVE-2026-93923: Improper Neutralization of Input During Web Page Generation

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with fu...

CVE-2026-93923 SiYuan through 3.8.4 Stored XSS via Heading Style Attribute

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with fu...

CVE-2026-93923 SiYuan through 3.8.4 Stored XSS via Heading Style Attribute

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with fu...

CVE-2026-93923 SiYuan through 3.8.4 Stored XSS via Heading Style Attribute

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with fu...

CVE-2026-32641

Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...