16510 matches found
CVE-2026-107629 Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 13.2.1 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-107627 Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 13.2.1 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-103485 Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property
The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feature.properties' parameter in all versions up to, and including, 5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
EUVD-2026-112681
The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feature.properties' parameter in all versions up to, and including, 5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2026-103485
The Extensions for Leaflet Map plugin for WordPress (versions <= 5.4 ) is vulnerable to Unauthenticated Stored DOM-Based Cross-Site Scripting . The root cause is insufficient input sanitization and output escaping within the feature.properties[] parameter. An unauthenticated attacker can injec...
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR MFSA 2026-112, MFSA 2026-120, bsc1286385: CVE-2026-100801: Privilege escalation in the DLL Services component. CVE-2026-113470: Cryptographic issue in the Security Block-lists,...
SUSE-SU-2026:4928-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR MFSA 2026-112, MFSA 2026-120, bsc1286385: - CVE-2026-100801: Privilege escalation in the DLL Services component. - CVE-2026-113470: Cryptographic issue in the Security Block-lists,...
WordPress HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin HT Mega versions = 3.2.7...
WordPress Greenshift – animation and page builder blocks plugin <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin Greenshift versions = 13.2.1...
findom-xss
FinDOM-XSS FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Installation $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencies: LinkFinder Usage To run the tool on a target, just use the...
WordPress Extensions for Leaflet Map plugin <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by zickzick2 in WordPress Plugin Extension for Leaflet Map versions = 5.4...
hupe13 Extensions for Leaflet Map Cross-site Scripting Vulnerability
Hupe13: Extensions for Leaflet Map versions 5.4 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping of the ‘feature.properties’ parameter, resulting in stored, DOM-based cross-site scripting. Unauthenticated attackers...
jsprime
Authors Nishant Das Patnaik nishant.dp@ Sarathi Sabyasachi Sahoo sarathisahoo@ Introduction Today, more and more developers are switching to JavaScript as their first choice of language. The reason is simple JavaScript has now been started to be accepted as the mainstream programming for...
Server-side Request Forgery (SSRF)
Overview happy-dom is a Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. It includes many web standards from WHATWG DOM and HTML. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via automatic loading of external...
Server-side Request Forgery (SSRF)
Overview @happy-dom/server-renderer is an Use Happy DOM for server-side rendering SSR or as a static site generator SSG. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the proxy request handler in ServerRendererServer.ts, where the constructed URL is not...
Reliance on Cookies without Validation and Integrity Checking
Overview happy-dom is a Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. It includes many web standards from WHATWG DOM and HTML. Affected versions of this package are vulnerable to Reliance on Cookies without Validation and Integrity Checking via th...
firefox: thunderbird: Sandbox escape in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component...
firefox: Use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Core & HTML component...
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Content Processes component...