1149318 matches found
PT-2026-91100
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-90835: Improper Neutralization of Input During Web Page Generation
A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published a...
CVE-2026-90694: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...
CVE-2026-82790: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82771: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82763: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-4103: Improper Neutralization of Input During Web Page Generation
Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious JavaScript when affected API documents are viewed. Successful exploitation may...
CVE-2026-78318: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Syncope. The notification message, as optionally shown by Console's and Enduser's login pages can be instructed to display HTML tags with unsafe JS inline, via malicious HTTP link generation...
PT-2026-91042
A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...
CVE-2026-90795: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in itsourcecode Loan Management System 1.0. The impacted element is an unknown function of the file navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicl...
PT-2026-91257
Name of the Vulnerable Software and Affected Versions itsourcecode Loan Management System version 1.0 Description A cross site scripting issue exists in the navbar.php file. A remote attacker can execute the attack by manipulating the page argument, which allows the injection of malicious scripts...
PT-2026-91085
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-90615: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...
CVE-2023-51769
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages...
PT-2026-91096
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
PT-2026-91113
A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendors handler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...
CVE-2026-82795: Improper Neutralization of Input During Web Page Generation
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
PT-2026-91067
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82788: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...