1148568 matches found
PT-2026-78964
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
PT-2026-78972
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
PT-2026-78966
Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...
PT-2026-78967
Name of the Vulnerable Software and Affected Versions Advance Product Search versions prior to 1.4.9 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting code into a web page...
PT-2026-78955
Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...
PT-2026-78961
Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...
PT-2026-78969
Unauthenticated Cross Site Scripting XSS in Paymob for WooCommerce = 4.1.10 versions...
PT-2026-78965
Unauthenticated Cross Site Scripting XSS in Swatchly – WooCommerce Variation Swatches for Products = 1.4.13 versions...
CVE-2026-66582: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...
PT-2026-78963
Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...
PT-2026-78951
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...
PT-2026-78971
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.2 versions...
PT-2026-78981
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
CVE-2026-66598: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...
JetBrains YouTrack < 2026.2.18068 Stored XSS (CVE-2026-75048)
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18068. It is, therefore, affected by a stored cross-site scripting vulnerability: - Stored XSS via the fenced code-block language label was possible. CVE-2026-75048 Note that Nessus has not tested for this issue but...
PT-2026-78952
Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...
Cross-site Scripting (XSS)
Overview org.springframework:spring-web is a package that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the...
Cross-site Scripting (XSS)
Overview org.springframework:spring-webflux is a Spring Framework module that contains support for reactive HTTP and WebSocket clients as well as for reactive server web applications including REST, HTML browser, and WebSocket style interactions. Affected versions of this package are vulnerable t...
Cross-site Scripting (XSS)
Overview org.springframework:spring-webmvc is a package that provides Model-View-Controller MVC architecture and ready components that can be used to develop flexible and loosely coupled web applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS when sending vi...
