1148894 matches found
PT-2026-102995
A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function kirim of the file application/modules/web/controllers/buku tamu.php of the component Guest Book. This manipulation of the argument nama/email/pesan causes...
PT-2026-103250
Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12.1 versions...
PT-2026-103263
Author Cross Site Scripting XSS in YITH WooCommerce Tab Manager = 2.15.0 versions...
CVE-2026-102586: Improper Neutralization of Input During Web Page Generation
A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting XSS attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary...
CVE-2026-103439: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting XSS. This issue affects MediaWiki Wikbase extension: 1.46, 1.45, and 1.43...
PT-2026-103249
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...
CVE-2026-96450: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in pixfort Core 4.3.3 versions...
CVE-2026-96819: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in oik = 4.15.4 versions...
CVE-2026-96830: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.9 versions...
CVE-2026-97067: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...
CVE-2026-97262: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...
CVE-2026-97266: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12.1 versions...
CVE-2026-97270: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...
CVE-2026-93464: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...
PT-2026-103259
Name of the Vulnerable Software and Affected Versions WP Chill Strong Testimonials versions prior to 3.3.12 Description Stored Cross-site Scripting XSS occurs due to improper neutralization of input during web page generation. This allows a contributor to inject malicious scripts into the...
PT-2026-103069
A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...
PT-2026-103261
Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...
PT-2026-103213
Contributor Cross Site Scripting XSS in The Plus Addons for Elementor Page Builder Lite = 6.5.1 versions...
PT-2026-107988
Name of the Vulnerable Software and Affected Versions League CommonMark versions 1.3.0 through 2.10.1 Description An issue exists where users posting Markdown can bypass the DisallowedRawHtml extension by ending raw HTML with a bare disallowed tag name. This allows attackers to insert a lone scri...