4257 matches found
CVE-2026-24629
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through = 2.1.0...
WordPress plugin Web Accessibility with Max Access has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
CVE-2026-24629: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through = 2.1.0...
PT-2026-4459
Name of the Vulnerable Software and Affected Versions Ability, Inc Web Accessibility with Max Access versions through 2.1.0 Description The software contains a flaw due to improper neutralization of input during web page generation, specifically a Stored Cross-site Scripting issue. This allows fo...
The vulnerability of the Incoming Goods Suite registration method, related to lack of access control, allows attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of the Incoming Goods Suite registration and delivery method is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to compromise the integrity and accessibility of the protected information...
WordPress Web Accessibility with Max Access plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Akshat Parikh in WordPress Plugin Web Accessibility with Max Access versions = 2.1.0...
CVE-2022-23142
ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short time, which can make the product management websites not accessible...
CVE-2022-0150
The WP Accessibility Helper WAH WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue...
CVE-2025-23725
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pshikli Accessibility Task Manager accessibility-task-manager allows Reflected XSS.This issue affects Accessibility Task Manager: from n/a through = 1.2.1...
The vulnerability of the PowerDNS Recursor DNS server, related to the failure to take measures to neutralize special elements in the output data, allows attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of the PowerDNS Recursor DNS server relates to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...
The vulnerability of the parseInt() function on the dify.ai development platform allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the parseInt function on the dify.ai development platform is related to the insufficient isolation of system-dependent functions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informatio...
CVE-2022-27837
A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...
The vulnerability of the Manifest File Handler component in Comodo Internet Security Premium antivirus software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Manifest File Handler component in Comodo Internet Security Premium relates to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...
CVE-2025-49355
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ikaes Accessibility Press ilogic-accessibility allows Stored XSS.This issue affects Accessibility Press: from n/a through = 1.0.2...
CVE-2025-63004
Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility all-in-one-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through = 1.15...
CVE-2025-49355
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ikaes Accessibility Press ilogic-accessibility allows Stored XSS.This issue affects Accessibility Press: from n/a through = 1.0.2...
CVE-2025-49355 WordPress Accessibility Press plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ikaes Accessibility Press ilogic-accessibility allows Stored XSS.This issue affects Accessibility Press: from n/a through = 1.0.2...
EUVD-2025-205976
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ikaes Accessibility Press allows Stored XSS.This issue affects Accessibility Press: from n/a through 1.0.2...
CVE-2025-49355 WordPress Accessibility Press plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ikaes Accessibility Press allows Stored XSS.This issue affects Accessibility Press: from n/a through 1.0.2...
