1148881 matches found
CVE-2026-66702: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...
CVE-2026-66707: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
CVE-2026-66711: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
PT-2026-68882
Name of the Vulnerable Software and Affected Versions WordPress affected versions not specified Description WordPress is subject to a pre-authentication reflected cross-site scripting XSS issue on the login screen. This allows an attacker to execute arbitrary JavaScript in the site origin without...
CVE-2026-65517: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...
CVE-2026-66664: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...
CVE-2026-65513: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.12.10 versions...
CVE-2026-66439: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...
CVE-2026-61961: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in EmbedPress = 4.5.6 versions...
PT-2026-68504
Name of the Vulnerable Software and Affected Versions JetEngine versions prior to 3.8.13.2 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...
CVE-2026-28082: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.13.1 versions...
CVE-2026-65509: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in wpDataTables = 7.5.1 versions...
EulerOS 2.0 SP15 : golang (EulerOS-SA-2026-2926)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a meta tag's content attribute. If the URL content were to...
CVE-2026-66663: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-19110: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in DataGear up to 5.0.0. The impacted element is the function HtmlTplDashboardWidgetHtmlRenderer of the file HtmlTplDashboardWidgetHtmlRenderer.java of the component Chart Name Handler. This manipulation of the argument Title causes cross site scripting. It is...
CVE-2026-28143: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Forminator = 1.56.0 versions...
VulnCheck KEV: CVE-2018-14013
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...
CVE-2026-61963: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...
WP < 7.0.3 - Contributor+ Stored XSS via Emoji Settings Element
Description WordPress does not properly restrict the content of submitted posts in some cases, which could allow users with a role of Contributor and above to perform Stored Cross-Site Scripting attacks against users previewing the post...