CVE-2026-86238 projectworlds Online Examination System Feedback Form feedback.php cross site scripting

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

EUVD-2026-72186

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

PT-2026-86683

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...

PT-2026-86686

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...

PT-2026-86595

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401 beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

PT-2026-86637

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage subjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed...

MiracleLinux 8 : grafana-pcp-5.1.1-18.el8_10 (AXSA:2026-1778:11)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1778:11 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of...

The vulnerability of the IBM Sterling B2B Integrator and IBM Sterling File Gateway software solutions lies in their lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code and disclose sensitive information.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and...

The vulnerability of the IBM Sterling B2B Integrator and IBM Sterling File Gateway software solutions lies in their lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code and disclose sensitive information.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and...

PT-2026-86797

league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handler...

The vulnerability of the SIMATIC S7 PLC web server, related to insecure resource initialization, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the web server in the SIMATIC S7 PLC is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

PT-2026-86678

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument site name/site desc leads to cross site scripting...

PT-2026-86621

A flaw has been found in sfturing ssm pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file ssm pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Endpoint. This manipulation of the argument hospitalName/officesName/doctorName...

PT-2026-86584

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

The vulnerability of the Portal component of the Kubernetes Helm package manager allows a attacker to perform cross-site scripting attacks.

The vulnerability of the Portal component of the Kubernetes Helm package management tool is related to the lack of security measures for protecting the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

MiracleLinux 9 : grafana-10.2.6-23.el9_8.3 (AXSA:2026-1777:26)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1777:26 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service...

CVE-2026-86226

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...

CVE-2026-86226 Projectwolds Online Attendance System profile.php cross site scripting

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...

CVE-2026-86226

Projectwolds Online Attendance System 1.0 contains a cross-site scripting (XSS) vulnerability in the file profile.php , triggered by manipulation of the email argument. The flaw allows a remote attacker with low privileges to inject scripts if a user interacts with the crafted request. The CVSS 3...

CVE-2026-86226 Projectwolds Online Attendance System profile.php cross site scripting

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...