Lucene search
+L

7156 matches found

Positive Technologies
Positive Technologies
added 2026/01/19 12:00 a.m.29 views

PT-2026-3437

Name of the Vulnerable Software and Affected Versions Altium Forum affected versions not specified Description A stored cross-site scripting XSS issue exists in the Altium Forum because of insufficient server-side input sanitization of forum post content. An authenticated attacker can inject...

9CVSS5.2AI score0.0032EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/01/17 3:22 p.m.17 views

CVE-2026-21623

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

9.4CVSS6.2AI score0.0018EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/16 11:31 p.m.7 views

CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

9CVSS5.6AI score0.00217EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/16 3:15 p.m.11 views

CVE-2026-21623

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

9.4CVSS0.0018EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/16 3:15 p.m.10 views

CVE-2026-21623

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

5.4CVSS5.7AI score0.0018EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/16 3:04 p.m.8 views

CVE-2026-21623 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

9.4CVSS5.9AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/16 3:04 p.m.22 views

CVE-2026-21623

The CVE-2026-21623 entry concerns the EasyDiscuss Joomla extension. Affected software: Joomla with the EasyDiscuss component, versions 1.0.0 through 5.0.15. Root cause: lack of input filtering in the forum post handling, enabling a persistent XSS vulnerability. Impact per sources: high confidenti...

9.4CVSS5.9AI score0.0018EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/16 3:04 p.m.35 views

CVE-2026-21623 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

9.4CVSS0.0018EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/16 3:04 p.m.5 views

CVE-2026-21623

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

9.4CVSS5.3AI score0.0018EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.13 views

Stack Ideas EasyDiscuss Cross-Site Script Vulnerabilities

Stack Ideas EasyDiscuss is a Q&A and forum component provided by Malaysia-based Stack Ideas Company. Stack Ideas EasyDiscuss has a cross-site scripting vulnerability, which stems from the lack of input filtering in the handling of forum posts. This vulnerability may lead to storage-based cross-si...

9.4CVSS5.6AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.10 views

PT-2026-3254

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

9.4CVSS6.2AI score0.0018EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/15 11:15 p.m.16 views

CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

9CVSS0.00217EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/15 11:15 p.m.9 views

CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

5.4CVSS5.8AI score0.00217EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/15 10:51 p.m.4 views

CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

9CVSS5.4AI score0.00217EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/15 10:51 p.m.31 views

CVE-2026-1009 Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

9CVSS0.00217EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/15 10:51 p.m.6 views

CVE-2026-1009 Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

9CVSS5.5AI score0.00217EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/15 10:51 p.m.39 views

CVE-2026-1009

CVE-2026-1009 is a stored XSS vulnerability in the Altium Forum caused by missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into posts; the payload is stored and executed when other users view the affected post. Successful expl...

9CVSS5.2AI score0.00217EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/15 12:00 a.m.15 views

PT-2026-3142

Name of the Vulnerable Software and Affected Versions Altium Forum affected versions not specified Description A stored cross-site scripting XSS issue exists because of insufficient server-side input validation of forum post content. An authenticated attacker can inject arbitrary JavaScript into...

9CVSS5.9AI score0.00217EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/15 12:00 a.m.20 views

Altium 365 security vulnerabilities

Altium 365 is a product design and development platform provided by the American company Altium. There is a security vulnerability in Altium 365, which stems from the lack of server-side input sanitization in the forum posts. This vulnerability may lead to storage-based cross-site scripting attac...

9CVSS5.6AI score0.00217EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/13 11:15 p.m.10 views

CVE-2022-50910

Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct...

9.8CVSS5.8AI score0.00676EPSS
SaveExploits1References5
Rows per page
Query Builder