JetBrains TeamCity < 2021.1.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2021.1.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.1.2, user enumeration was possible. CVE-2021-43194 - In JetBrains TeamCity before 2021.1.2, remote code execution via th...

CVE-2026-78263

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...

CVE-2026-78264

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...

CVE-2026-78282

Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...

CVE-2026-32556

Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...

CVE-2026-78282 WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...

CVE-2026-78282

CVE-2026-78282 affects the WordPress Stripe Payments plugin in versions

CVE-2026-78282 WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...

CVE-2026-78264 WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...

CVE-2026-78264

CVE-2026-78264 is an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting the WordPress Toolset Blocks plugin in versions 1.6.26 and earlier . The CNA (Patchstack) assigns a CVSS 3.1 base score of 7.1 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a network-explo...

CVE-2026-78264 WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...

CVE-2026-78263 WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...

CVE-2026-78263

Event Tickets WordPress plugin versions

CVE-2026-78263 WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...

CVE-2026-32556 WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...

CVE-2026-32556

CVE-2026-32556 affects the WordPress Boost plugin versions 2.0.4 and earlier , introducing an unauthenticated Cross-Site Scripting (XSS) vulnerability. A remote attacker can inject malicious script content that executes in the context of a victim's browser, requiring user interaction but no prior...

CVE-2026-32556 WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...

CVE-2026-74998

A flaw was found in Roundcube Webmail. Responses from the Cascading Style Sheets CSS proxy were not properly validated. This could allow a remote attacker to exploit MIME sniffing vulnerabilities, resulting in information disclosure or Cross-Site Scripting XSS...

SUSE-SU-2026:23311-1 Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component bsc1272769...

CVE-2026-30864

Combodo iTop versions prior to 3.2.3 are susceptible to a Reflected Cross-Site Scripting (XSS) vulnerability in the dashboard revert functionality . An authenticated attacker (low privileges) can craft a malicious URL that, when clicked by a victim, executes arbitrary script in the victim's brows...