CVE-2026-66597: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in wpDataTables = 6.5.1.4 versions...

CVE-2026-66590: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...

CVE-2026-66581: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...

CVE-2026-71368: Improper Neutralization of Input During Web Page Generation

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

PT-2026-78898

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

PT-2026-78977

Name of the Vulnerable Software and Affected Versions Flatastic versions 2.0 and earlier Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...

PT-2026-78964

Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...

PT-2026-78972

Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...

PT-2026-78966

Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...

PT-2026-78967

Name of the Vulnerable Software and Affected Versions Advance Product Search versions prior to 1.4.9 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting code into a web page...

PT-2026-78951

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...

PT-2026-78955

Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...

PT-2026-78961

Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...

PT-2026-78969

Unauthenticated Cross Site Scripting XSS in Paymob for WooCommerce = 4.1.10 versions...

PT-2026-78965

Unauthenticated Cross Site Scripting XSS in Swatchly – WooCommerce Variation Swatches for Products = 1.4.13 versions...

CVE-2026-66582: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...

PT-2026-78963

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

Cross-site Scripting (XSS)

Overview org.springframework:spring-web is a package that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the...

PT-2026-78981

Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...

PT-2026-79078

Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can create a file with an HTML payload in its name can trigger stored cross-site scripting when a user browses a directory served with MG ENABLE DIRLIST. The printdirentry path called by listdir in src/http.c...