1148595 matches found
CVE-2026-66637: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...
PT-2026-79905
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization of user-controlled data rendered in pagination controls by...
CVE-2026-73393: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...
CVE-2026-73382: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.2.0...
CVE-2026-73375: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...
CVE-2026-73362: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in URL Shortify = 2.5.0 versions...
CVE-2026-73360: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
CVE-2026-73358: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...
CVE-2026-73342: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
CVE-2026-68567: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...
CVE-2026-68565: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
CVE-2026-66667: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...
CVE-2026-66643: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
CVE-2026-74902: Improper Neutralization of Input During Web Page Generation
SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fails to escape filenames before inserting them into HTML via insertAdjacentHTML. Attackers can craft a malicious filename containing script payloads that execute with full OS command access...
PT-2026-76915
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5...
PT-2026-77077
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
PT-2026-77036
Unauthenticated Cross Site Scripting XSS in SSL Zen = 4.7.43 versions...
PT-2026-77084
Unauthenticated Cross Site Scripting XSS in Autopay = 5.0.0 versions...