1132957 matches found
PT-2026-84466
Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious payloads within angle brackets in the FROM email header. The sanitization logic removes only the first occurrence of eac...
TencentOS Server 4: grafana-pcp (TSSA-2026:0946)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0946 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-82221
Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...
CVE-2026-82224
Unauthenticated Cross Site Scripting XSS in SliceWP = 1.2.10 versions...
CVE-2026-82229
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...
CVE-2026-81765
Unauthenticated Cross Site Scripting XSS in Tailored Tools = 3.0.2 versions...
CVE-2026-81768
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81778
Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...
CVE-2026-81764
Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...
CVE-2026-81291
Unauthenticated Cross Site Scripting XSS in Uncode = 2.12.7 versions...
CVE-2026-81298
Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...
CVE-2026-81290
Unauthenticated Cross Site Scripting XSS in Email Subscribers & Newsletters = 5.9.33 versions...
CVE-2025-63607
TechStore 1.0 is vulnerable to Cross Site Scripting XSS. In contactdisplay, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser...
EUVD-2026-68798
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...
CVE-2026-82229
An unauthenticated Cross Site Scripting (XSS) vulnerability affects the WordPress Social Login and Register plugin in versions 7.8.2 and earlier . The flaw was discovered by Patchstack researcher Ananda Dhakal and carries a CVSS 3.1 score of 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L...
CVE-2026-82229 WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...
CVE-2026-82229 WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...
CVE-2026-82224
CVE-2026-82224 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress SliceWP plugin , affecting versions