1133007 matches found
Roundcube Webmail 1.6.x < 1.6.18 / 1.7.x < 1.7.3 Multiple Vulnerabilities
The remote web server is running Roundcube Webmail version 1.6.x prior to 1.6.18 or 1.7.x prior to 1.7.3. It is, therefore, affected by multiple vulnerabilities: - The cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This iss...
PT-2026-85092
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
PT-2026-84901
A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirect url leads to cros...
PT-2026-85110
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
The vulnerability of the LibreNMS network monitoring system, related to the lack of protection for the website structure, allows attackers to perform cross-site scripting attacks (XSS) and increase their privileges.
The vulnerability of the LibreNMS network monitoring system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS and increase their privileges...
PT-2026-85027
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kriesi Enfold allows Reflected XSS. This issue affects Enfold: from n/a through 8.0...
CVE-2026-85207: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched remotely. The exploit is publicly availab...
ALSA-2026:63022 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...
ALSA-2026:63124 Important: grafana-pcp security update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME head...
Important: grafana-pcp security update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive...
CVE-2026-81295: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
PT-2026-85086
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
CVE-2026-2573: Improper Neutralization of Input During Web Page Generation
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This mak...
PT-2026-84900
A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirect url causes cross site scripting. The attack is possible to be carried...
PT-2026-85137
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magepeople inc. Booking and Rental Manager allows Stored XSS. This issue affects Booking and Rental Manager: from n/a through 2.7.7...
PT-2026-85111
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
PT-2026-85116
Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...
PT-2026-85087
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...