CVE-2026-77490

CVE-2026-77490 affects Microsoft Edge (Chromium-based) due to improper neutralization of input during web page generation, i.e., a cross-site scripting (XSS) flaw. An unauthorized attacker can leverage this over a network to perform spoofing . The CVSS 3.1 score is 6.1 (Medium) with a vector of A...

CVE-2026-62138

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...

CVE-2026-62111

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

CVE-2026-62110

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

CVE-2026-88057

A flaw was found in Angular's @angular/core and @angular/compiler components. This vulnerability allows a remote attacker to bypass security sanitization mechanisms. By injecting malicious data into specific HTML attributes, an attacker can cause the application to execute arbitrary JavaScript co...

CVE-2026-62138

A Contributor-level Cross Site Scripting (XSS) vulnerability affects the Visual Composer Website Builder WordPress plugin in versions ≤ 45.16.1 . The flaw, discovered by sungbyeongchan, allows an attacker with Contributor privileges to inject malicious scripts via user interaction. The CVSS 3.1 s...

EUVD-2026-76199

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...

CVE-2026-62138 WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...

CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

CVE-2026-62111

CVE-2026-62111 affects the WordPress Simple Payment plugin in versions 2.5.4 and below . The vulnerability is a Contributor-level Cross-Site Scripting (XSS) flaw, discovered by V1T via Patchstack. It carries a CVSS 3.1 score of 6.5 (MEDIUM) with a changed scope, requiring low privileges and user ...

EUVD-2026-76209

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

EUVD-2026-76210

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

CVE-2026-62110

CVE-2026-62110 is a Contributor-level Cross-Site Scripting (XSS) vulnerability in the Bold Page Builder WordPress plugin, affecting versions 5.9.9 and earlier . The flaw was discovered by LevinityCyber and assigned a CVSS 3.1 score of 6.5 (MEDIUM) with a changed scope, requiring user interaction ...

CVE-2026-62110 WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

CVE-2025-68461

CVE-2025-68461 Roundcube Webmail 1.5.12 より前のバージョン、および 1.6 系の 1.6.12 より前のバージョンは、SVG 文書内の タグを介したクロスサイトスクリプティング（XSS）の脆弱性の影響を受けます。 この検出手法はどのように動作しますか？ レスポンス内の "rcversion" JSON フィールドから Roundcube のバージョンを抽出し、major.minor.patch 形式にパースし、バージョンが 1.5.12 未満、または 1.6.0 から 1.6.11 の範囲かをチェックすることで、脆弱なインスタンスを特定します。...

CVE-2026-7298 Reflected XSS in IdeaSoft's Smart E-Commerce

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: through 11092026. NOTE: The vendor was contacted early about this disclosure bu...

POC-CVE-2026-32621-Apollo-Federation-XSS-Vulnerability

CVE-2026-32621 - Apollo Federation 原型污染 PoC 概述 字段| 值 ---|--- CVE| CVE-2026-32621 CVSS| 9.9 严重 CWE| CWE-1321（原型污染） 受影响版本| Apollo Federation 2.9.6、 2.10.5、 2.11.6、 2.12.3、 2.13.2 已修复版本| 2.9.6、2.10.5、2.11.6、2.12.3、2.13.2 GHSA| GHSA-pfjj-6f4p-rvmh 漏洞描述 Apollo Federation 的 deepMerge 函数（在...

test-xss-swagger-CVE-2019-1749

此存储库没有 README。...

WordPress Advanced Customized Prompts plugin <= 1.0.1 - Subscriber+ Stored XSS vulnerability

Subscriber+ Stored XSS vulnerability discovered by 0xBassia in WordPress Plugin Advanced Customized Prompts versions = 1.0.1...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...