1143883 matches found
EUVD-2026-89965
MISP contains a stored cross-site scripting XSS vulnerability in the galaxy icon handling path. The icon field of a galaxy object was persisted without any server-side validation through the galaxy add, edit, and sync/import capture endpoints. The stored value was subsequently concatenated direct...
EUVD-2026-89935
Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...
EUVD-2026-89927
Contributor Cross Site Scripting XSS in Strong Testimonials = 3.3.11 versions...
EUVD-2026-89918
Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12.1 versions...
EUVD-2026-89887
Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.85 versions...
EUVD-2026-89832
Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...
EUVD-2026-89817
Contributor Cross Site Scripting XSS in Premium Addons for Elementor = 4.11.105 versions...
CVE-2026-103388 MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field
MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTERVALIDATEURL validation. Because FILTERVALIDATEURL accepts the javascript: URI scheme, a user with galaxy editor privileges on the local instance or on a synced instance could...
CVE-2026-97301
Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...
CVE-2026-97286
Contributor Cross Site Scripting XSS in Strong Testimonials = 3.3.11 versions...
CVE-2026-97279
Contributor Cross Site Scripting XSS in Polylang = 3.8.9 versions...
CVE-2026-97266
Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12.1 versions...
CVE-2026-97067
Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...
CVE-2026-96450
Contributor Cross Site Scripting XSS in pixfort Core 4.3.3 versions...
CVE-2026-94077
Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...
CVE-2026-62078
Contributor Cross Site Scripting XSS in Premium Addons for Elementor = 4.11.105 versions...
CVE-2026-102398 WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Popup by Supsystic = 1.13.1 versions...
CVE-2026-102384
The WordPress Supreme Modules Lite plugin in versions