DEBIAN-CVE-2026-15928

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...

AZL-94010 CVE-2026-15928 affecting package xmlrpc-c 1.60.04-4

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...

UBUNTU-CVE-2026-15928

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...

CVE-2026-15928

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...

CVE-2026-15928

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...

EUVD-2026-49062

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...

CVE-2026-15928

XMLRPC-C Library versions 1.07–1.67.01 are vulnerable to a reflected XSS in the error page component. The CVE entry specifies a reflected cross-site scripting vulnerability with NETWORK attack vector, no privileges required, and user interaction needed. Impact is HIGH on confidentiality (both vul...

PT-2026-65319

Name of the Vulnerable Software and Affected Versions GetGenie versions prior to 4.4.4 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update GetGenie to version 4.4.4 o...

CVE-2026-51565

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

PT-2026-64997

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.2 Description Stored cross-site scripting is possible due to improper escaping of the title-img Individual Attribute List value during the rendering of Gallery and Kanban cover images. This occurs via unescaped sty...

PT-2026-64829

Name of the Vulnerable Software and Affected Versions XMLRPC-C Library versions 1.07 through 1.67.01 Description A reflected cross-site scripting XSS issue exists in the error page component. Reflected XSS occurs when an application includes untrusted data in a web page without proper validation ...

PT-2026-65317

Name of the Vulnerable Software and Affected Versions Message Filter for Contact Form 7 versions prior to 1.6.4 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update...

PT-2026-64995

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.3 Description Stored and reflected cross-site scripting issues exist in SVG sanitization. Authenticated attackers can bypass the HTML parser-based cleaner by hiding script tags within desc, style, or noscript...

MiracleLinux 8 : [security - high] nodejs:24 (AXSA:2026-1352:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1352:01 advisory. ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...

PT-2026-65301

A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript block using the Jinja safe filter. Because the tree data can contain values derived from captured and potentially...

PT-2026-65318

Name of the Vulnerable Software and Affected Versions Ultimate Addons for Contact Form 7 versions prior to 3.5.46 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update...

PT-2026-65302

Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with link-like properties, such as url, uri, href, link, website, or homepage, were rendered as hyperlinks without validating their URL scheme. An attacker able to supply or influence...

PT-2026-65320

Name of the Vulnerable Software and Affected Versions GiveWP versions prior to 4.16.4 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations Update GiveWP to version 4.16...

PT-2026-65324

Name of the Vulnerable Software and Affected Versions Kali Forms versions 2.4.18 and earlier Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations Update Kali Forms to a...

PT-2026-65325

Name of the Vulnerable Software and Affected Versions Contest Gallery versions prior to 30.0.7 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Contest Gallery to ...