CVE-2024-30956

CVE-2024-30956 cf https://www.lauyan.com/en/toweb-updates.htmliyFEw37D DOM-based XSS HTML Injection vulnerability in TOWeb version 5 eg http://127.0.0.1:8000/message.html?==gC+QHcpJ3Yz9CPpcyUThFIkV2chJWLN9ERngCdyVGbh5DdwlmcjNHP navigate to the url, the JS code is executed PS: src contains a copy ...

CVE-2026-78534

Unauthenticated Cross Site Scripting XSS in Educavo = 3.4.2 versions...

CVE-2026-78532

Unauthenticated Cross Site Scripting XSS in LMS = 8.3 versions...

CVE-2026-62100

Unauthenticated Cross Site Scripting XSS in KuteShop = 4.2.9 versions...

CVE-2026-62116

Unauthenticated Cross Site Scripting XSS in Barcode Scanner with Inventory & Order Manager = 1.13.1 versions...

CVE-2026-62095

Unauthenticated Cross Site Scripting XSS in Biolife = 3.2.3 versions...

CVE-2026-62093

Unauthenticated Cross Site Scripting XSS in TechOne = 3.0.3 versions...

CVE-2026-62082

Unauthenticated Cross Site Scripting XSS in Pin WP = 7.0 versions...

CVE-2026-62091

Unauthenticated Cross Site Scripting XSS in Armania = 1.4.8 versions...

CVE-2026-62064

Unauthenticated Cross Site Scripting XSS in Ambed = 1.0.0 versions...

CVE-2026-62034

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

CVE-2026-62037

Unauthenticated Cross Site Scripting XSS in Document Embedder = 2.4.0 versions...

CVE-2026-62027

Unauthenticated Cross Site Scripting XSS in Team Section Block = 2.0.4 versions...

CVE-2026-57742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2...

CVE-2026-42711

Unauthenticated Cross Site Scripting XSS in Slider by 10Web = 1.2.63 versions...

CVE-2026-42715

Unauthenticated Cross Site Scripting XSS in Photo Gallery by 10Web = 1.8.47 versions...

CVE-2026-42709

Unauthenticated Cross Site Scripting XSS in Food Menu – Restaurant Menu & Online Ordering for WooCommerce = 6.0.5 versions...

CVE-2026-42702

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: from n/a through 4.1.0...

CVE-2026-42697

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.7.5...

CVE-2026-42699

Unauthenticated Cross Site Scripting XSS in FV Player 8 = 8.1.8 versions...