Google Chrome Microsoft Edge DOM Component Access

The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

PT-2026-123250

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows DOM-Based XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1069...

Google Chrome Microsoft Edge DoS

The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

PT-2026-125510

DOMPurify from 3.4.4 before 3.4.17 contains a SAFE FOR TEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using RETURN DOM, RETURN DOM FRAGMENT, or IN PLACE modes. Attackers can split expressions across text nodes separated by disallowed elements, whi...

VulnCheck KEV: CVE-2026-28177

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Atlantic LLC Popup Maker popup-maker allows DOM-Based XSS.This issue affects Popup Maker: from n/a through 1.23.0...

CLSA-2026-1792866976 TuxCare security update for @happy-dom/jest-environment (1 CVE)

TuxCare rebuilt @happy-dom/jest-environment to address 1 CVE. Fixed in 20.8.8-tuxcare.1...

CLSA-2026-1792866974 TuxCare security update for @happy-dom/jest-environment (1 CVE)

TuxCare rebuilt @happy-dom/jest-environment to address 1 CVE. Fixed in 9.20.3-tuxcare.4...

CLSA-2026-1792866963 TuxCare security update for @happy-dom/jest-environment (1 CVE)

TuxCare rebuilt @happy-dom/jest-environment to address 1 CVE. Fixed in 9.20.3-tuxcare.3...

CLSA-2026-1792866960 TuxCare security update for @happy-dom/jest-environment (1 CVE)

TuxCare rebuilt @happy-dom/jest-environment to address 1 CVE. Fixed in 9.20.3-tuxcare.1...

CLSA-2026-1792866938 TuxCare security update for @happy-dom/jest-environment (2 CVEs)

TuxCare rebuilt @happy-dom/jest-environment to address 2 CVEs. Fixed in 15.11.7-tuxcare.1...

CLSA-2026-1792866906 TuxCare security update for @happy-dom/jest-environment (3 CVEs)

TuxCare rebuilt @happy-dom/jest-environment to address 3 CVEs. Fixed in 9.10.9-tuxcare.1...

CLSA-2026-1792866907 TuxCare security update for @happy-dom/jest-environment (3 CVEs)

TuxCare rebuilt @happy-dom/jest-environment to address 3 CVEs. Fixed in 14.12.3-tuxcare.2...

CVE-2026-114179

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordplus BP Better Messages bp-better-messages allows DOM-Based XSS.This issue affects BP Better Messages: from n/a through 3.1.3...

CVE-2026-114179

The wordplus BP Better Messages WordPress plugin (versions 3.1.3 and below ) is vulnerable to a DOM-Based Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation. This vulnerability allows an attacker to execute malicious scripts in a use...

CVE-2026-114179 WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordplus BP Better Messages bp-better-messages allows DOM-Based XSS.This issue affects BP Better Messages: from n/a through 3.1.3...

CVE-2026-114179 WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordplus BP Better Messages bp-better-messages allows DOM-Based XSS.This issue affects BP Better Messages: from n/a through 3.1.3...

EUVD-2026-109245

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordplus BP Better Messages bp-better-messages allows DOM-Based XSS.This issue affects BP Better Messages: from n/a through 3.1.3...

Happy DOM: Incomplete Fix For CVE-2026-33943: Unsanitized Import Alias Leads To Host Code Execution

Summary The ESM compiler in "[email protected]" does not validate imported local binding aliases before interpolating them into generated JavaScript. As a result, an invalid ESM import alias can be transformed into a valid JavaScript destructuring default initializer and executed. This appears to...

WordPress Better Messages cross-site scripting vulnerability

WordPress Better Messages versions 3.1.3 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to DOM-based cross-site scripting attacks...

PT-2026-122523

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordplus BP Better Messages bp-better-messages allows DOM-Based XSS.This issue affects BP Better Messages: from n/a through 3.1.3...