1126263 matches found
PT-2026-49758
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.12 Description Exported session HTML preserves unsafe javascript: and data: links in generated content. This allows for the execution of browser-side scripts if a trusted operator opens the exported file and...
Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
Multiple security vulnerabilities in the Crawl4AI Docker API server affecting endpoints for crawling, markdown/LLM extraction, screenshots, PDFs, webhooks, monitoring, JavaScript execution, and configuration...
CVE-2026-48157
Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4.4.0 through 4.15, if an application uses HttpException::setTitle and/or setDescription to include untrusted/request-derived data in the error title or description e.g. "No products found...
EUVD-2026-36990
Unauthenticated Cross Site Scripting XSS in Quiz And Survey Master = 11.0.0 versions...
EUVD-2026-36979
Unauthenticated Cross Site Scripting XSS in Coupon Affiliates = 7.5.3 versions...
EUVD-2026-36994
Unauthenticated Cross Site Scripting XSS in WP Time Slots Booking Form = 1.2.46 versions...
EUVD-2026-36964
Subscriber Cross Site Scripting XSS in Shipment Tracker for Woocommerce = 1.5.3.2 versions...
EUVD-2026-36972
Unauthenticated Cross Site Scripting XSS in Notification for Telegram = 3.5 versions...
EUVD-2026-36930
Unauthenticated Cross Site Scripting XSS in WP Google Review Slider = 18.0 versions...
EUVD-2026-36927
Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.10.6 versions...
EUVD-2026-36931
Unauthenticated Cross Site Scripting XSS in ManageWP Worker = 4.9.31 versions...
EUVD-2026-36949
Unauthenticated Cross Site Scripting XSS in Social Slider Feed = 2.3.2 versions...
EUVD-2026-36953
Unauthenticated Cross Site Scripting XSS in Paid Member Subscriptions = 2.17.3 versions...
EUVD-2026-36942
Subscriber Cross Site Scripting XSS in JupiterX Core = 4.14.1 versions...
EUVD-2026-36928
Unauthenticated Cross Site Scripting XSS in Contact Form to Any API = 3.0.3 versions...
EUVD-2026-36921
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.14.2 versions...
EUVD-2025-210162
Unauthenticated Cross Site Scripting XSS in Elis WordCents adSense Widget with Analytics = 1.3.03.27 versions...
EUVD-2025-210161
Unauthenticated Cross Site Scripting XSS in Okay Toolkit = 2.3 versions...