1148597 matches found
PT-2026-77070
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
PT-2026-77065
Name of the Vulnerable Software and Affected Versions Featured Video Plus versions prior to 2.3.4 Description Cross Site Scripting XSS allows an attacker with contributor privileges to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than 2.3.3...
PT-2026-77072
Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...
PT-2026-77066
Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...
PT-2026-77075
Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...
CVE-2026-66638: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...
PT-2026-77068
Name of the Vulnerable Software and Affected Versions Login With Ajax versions prior to 4.5.2 Description Cross Site Scripting XSS exists in the contributor section, allowing an attacker to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than 4.5...
PT-2026-77039
Unauthenticated Cross Site Scripting XSS in Mayosis Core = 5.4.7 versions...
PT-2026-77996
Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An unauthenticated attacker with network access via HTTP can compromise the Experience Manager component. This issue requires human interaction from ...
PT-2026-77276
Name of the Vulnerable Software and Affected Versions Otalio Ship Property Management System versions prior to 2.22.0 Description Unescaped stored values in the application security page allow authenticated attackers to escalate privileges via persistent cross-site scripting XSS, a technique wher...
CVE-2026-30250
Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...
PT-2026-78245
Name of the Vulnerable Software and Affected Versions PublishPress Series versions prior to 2.17.1 Description Improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS, a flaw where malicious scripts are permanently stored on the target server and lat...
PT-2026-77492
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the...
PT-2026-78247
Name of the Vulnerable Software and Affected Versions Media Library Assistant versions prior to 3.40 Description Improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS, a condition where malicious scripts are permanently stored on the target server...
CVE-2026-73426: Improper Neutralization of Input During Web Page Generation
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...
CVE-2026-28568: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Quill Forms = 5.7.1 versions...
CVE-2026-66629: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...
PT-2026-78013
Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Workbench component allows a low-privileged attacker with network access via HTTP to compromise the system. The exploitation requires...
