1137718 matches found
CVE-2026-78282: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
CVE-2026-34491: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1...
CVE-2026-32556: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...
PT-2026-80806
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...
CVE-2022-30983
A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...
PT-2026-81048
Name of the Vulnerable Software and Affected Versions Boost versions prior to 2.0.5 Description An unauthenticated Cross-Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the context of a user's session without requiring prior authentication. Recommendation...
PT-2026-80807
Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...
PT-2026-80817
Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...
PT-2026-80980
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1...
PT-2026-81030
A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...
CVE-2026-78290: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...
CVE-2026-78263: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-78414: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-66599: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...
CVE-2026-19852: Unrestricted Upload of File with Dangerous Type
NewSiteServer NSS developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting...
PT-2026-81056
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
PT-2026-81062
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
PT-2026-80828
Unauthenticated Cross Site Scripting XSS in Tourmaster = 5.4.9 versions...