66 matches found
CLEANSTART-2026-MO80037 built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability
Security vulnerability affects the grafana package. The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=6.0.0, <=6.2.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=6.0.0, <=6.1.0) +55 more potentially affected by CVE-2026-104711 via org.apache.struts:struts2-core (>=7.0.0, <=7.3.0)
org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =1.0, =7.0.0, =7.0.0, =7.0.0, =7.3.0 and more Source cves: CVE-2026-104711 Source advisory:...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=6.0.0, <=6.2.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=6.0.0, <=6.1.0) +55 more potentially affected by CVE-2026-104714 via org.apache.struts:struts2-core (>=7.0.0, <=7.3.0)
org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =1.0, =7.0.0, =7.0.0, =7.0.0, =7.3.0 and more Source cves: CVE-2026-104714 Source advisory:...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=6.0.0, <=6.2.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=6.0.0, <=6.1.0) +55 more potentially affected by CVE-2026-104712 via org.apache.struts:struts2-core (>=7.0.0, <=7.3.0)
org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =1.0, =7.0.0, =7.0.0, =7.0.0, =7.3.0 and more Source cves: CVE-2026-104712 Source advisory:...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=6.0.0, <=6.2.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=6.0.0, <=6.1.0) +55 more potentially affected by CVE-2026-104714 via org.apache.struts:struts2-core (>=7.0.0, <=7.3.0)
org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =1.0, =7.0.0, =7.0.0, =7.0.0, =7.3.0 and more Source cves: CVE-2026-104714 Source advisory: MEND:CVE-2026-104714...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=6.0.0, <=6.2.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=6.0.0, <=6.1.0) +55 more potentially affected by CVE-2026-104712 via org.apache.struts:struts2-core (>=7.0.0, <=7.3.0)
org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =1.0, =7.0.0, =7.0.0, =7.0.0, =7.3.0 and more Source cves: CVE-2026-104712 Source advisory: MEND:CVE-2026-104712...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=6.0.0, <=6.2.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=6.0.0, <=6.1.0) +55 more potentially affected by CVE-2026-104711 via org.apache.struts:struts2-core (>=7.0.0, <=7.3.0)
org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =1.0, =7.0.0, =7.0.0, =7.0.0, =7.3.0 and more Source cves: CVE-2026-104711 Source advisory: MEND:CVE-2026-104711...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=6.0.0, <=6.1.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=6.0.0, <=6.1.0) +55 more potentially affected by CVE-2026-73634 via org.apache.struts:struts2-core (>=7.0.0, <=7.2.1)
org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =1.0, =7.0.0, =7.0.0, =7.0.0, =7.2.1 and more Source cves: CVE-2026-73634 Source advisory:...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=6.0.0, <=6.1.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=6.0.0, <=6.1.0) +55 more potentially affected by CVE-2026-73634 via org.apache.struts:struts2-core (>=7.0.0, <=7.2.1)
org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =1.0, =7.0.0, =7.0.0, =7.0.0, =7.2.1 and more Source cves: CVE-2026-73634 Source advisory: MEND:CVE-2026-73634...
Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion Detection
The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...
CVE-2026-24597 WordPress Organization chart plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in WpDevArt Organization chart allows Cross Site Request Forgery. This issue affects Organization chart: from n/a through 1.7.5...
CVE-2026-22637
The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript...
CVE-2026-22637
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-22637
...
CVE-2026-22637
CVE-2026-22637 is associated with Grafana XY Chart Plugin. The Red Hat entry and PT--security advisory describe a DOM-based XSS vulnerability where a user with Editor permissions can modify a panel to execute arbitrary JavaScript. Affected component: Grafana XY Chart Plugin; attack vector involve...
EUVD-2025-60944
The Chart Expert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmzezchart' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes. This makes it possible for...
CVE-2025-11171: Missing Authentication for Critical Function
The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...