CVE-2026-3528

A flaw was found in Calculation Fields. This vulnerability, categorized as an Improper Neutralization of Input During Web Page Generation, allows a remote attacker to inject malicious scripts. This Cross-site Scripting XSS can lead to the execution of unauthorized code in a user's web browser,...

CVE-2026-3010

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

WordPress plugin Gallerio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...