114439 matches found
PT-2026-106245
Name of the Vulnerable Software and Affected Versions Docling versions 2.95.0 through 2.131.0 Description The HTML image resource loader in docling/backend/utils/image resource loader.py forwards headers configured via the HTMLBackendOptions.headers setting to every remote image URL specified by ...
AlmaLinux 9 : osbuild-composer (ALSA-2026:69293)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69293 advisory. golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-27136 golang.org/x/net/html:...
PT-2026-106185
Name of the Vulnerable Software and Affected Versions Ghost versions 5.94.0 through 6.63.0 Description Ghost, a Node.js content management system, allows staff users, including those with Contributor roles, to host arbitrary HTML on the site domain. This occurs when creating a bookmark card, as t...
CVE-2026-105651: Improper Neutralization of Input During Web Page Generation
Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...
CVE-2026-102426: Improper Neutralization of Input During Web Page Generation
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dcfilter request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then...
RHEL 7 : rhc-worker-script (RHSA-2026:75689)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:75689 advisory. Remote Host Configuration rhc worker for executing scripts on hosts managed by Red Hat Lightspeed. Security Fixes: encoding/asn1: golang: G...
CVE-2026-95309
An ui misrepresentation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533074595...
CVE-2026-105224
YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...
CVE-2026-105086
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString strips tags before decoding entities and runs twice via setTitle and save, attackers ca...
CVE-2026-105086 WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString strips tags before decoding entities and runs twice via setTitle and save, attackers ca...
CVE-2026-105224
YesWiki versions prior to 4.6.7 are vulnerable to a cross-site scripting (XSS) vulnerability within the Bazar valeur action . The root cause is the rendering of unescaped HTML fetched from a remote URL. Specifically, an attacker can point the tools/bazar/actions/valeur.php endpoint to a controlle...
EUVD-2026-92111
YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...
CVE-2026-105224 YesWiki before 4.6.7 Stored XSS via Bazar valeur Action
YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...
CVE-2026-105224: Improper Neutralization of Input During Web Page Generation
YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...
PT-2026-104641
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString strips tags before decoding entities and runs twice via setTitle and save, attackers ca...
CVE-2026-105086: Improper Neutralization of Input During Web Page Generation
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString strips tags before decoding entities and runs twice via setTitle and save, attackers ca...
CVE-2026-88783
The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the editor context, so the wider set is applied when filtering content submitted by unauthenticated users as well, allowing them to store markup which the Kubio AI Page Builder...
CVE-2026-95323
An ui misrepresentation flaw was found in the Chromium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/546438368...