CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

Netbox-CVE-2023-37625

Netbox-CVE-2023-37625 Description A stored cross-site scripting XSS vulnerability in Netbox alert1' 3. Add a new model, in this example add a 'manufacturer' model. 4. Open the newly created model as any authenticated user, and observer that the alert box has executed...

CVE-2026-65534

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-65534

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-65534 WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-65534 WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

EUVD-2026-48135

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-65534

CVE-2026-65534 concerns the WordPress plugin "Custom links in Elementor Image Carousel" (versions

WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Custom links in Elementor Image Carousel versions = 1.1.1...

CVE-2026-65534: Improper Neutralization of Input During Web Page Generation

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

PT-2026-63945

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-0727

The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the plugin not properly verifying that a user is authorized to perform an action in the 'wpaassaveattachmentdata' and...

EUVD-2020-6075

Malware in sbrugna...

EUVD-2025-31296

Malicious code in bioql PyPI...

EUVD-2025-4047

Malicious code in bioql PyPI...

CVE-2025-60104

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jordy Meow Gallery Custom Links gallery-custom-links allows Stored XSS.This issue affects Gallery Custom Links: from n/a through = 2.2.5...

WordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by NumeX in WordPress Plugin Gallery Custom Links versions = 2.2.5...

CVE-2025-60104

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jordy Meow Gallery Custom Links gallery-custom-links allows Stored XSS.This issue affects Gallery Custom Links: from n/a through = 2.2.5...

CVE-2025-60104 WordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jordy Meow Gallery Custom Links gallery-custom-links allows Stored XSS.This issue affects Gallery Custom Links: from n/a through = 2.2.5...

CVE-2025-60104

CVE-2025-60104 affects Gallery Custom Links (WordPress plugin) up to version 2.2.5. The vulnerability is a Stored XSS caused by improper neutralization of input during web page generation. Exploitation details are not provided in the initial document, but the CVE description states the issue allo...