BIT-DISCOURSE-2026-33395 Discourse has stored click‑based XSS via Graphviz SVG javascript: links

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, the discourse-graphviz plugin contains a stored cross-site scripting XSS vulnerability that allows authenticated users to inject malicious JavaScript code through DOT graph definitions. For...

CVE-2026-33395

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the discourse-graphviz plugin contains a stored cross-site scripting XSS vulnerability that allows authenticated users to inject malicious JavaScript code through DOT graph definitions. F...

EUVD-2026-13402

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the discourse-graphviz plugin contains a stored cross-site scripting XSS vulnerability that allows authenticated users to inject malicious JavaScript code through DOT graph definitions. F...

CVE-2026-33395 Discourse has stored click‑based XSS via Graphviz SVG javascript: links

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the discourse-graphviz plugin contains a stored cross-site scripting XSS vulnerability that allows authenticated users to inject malicious JavaScript code through DOT graph definitions. F...

CVE-2026-33395 Discourse has stored click‑based XSS via Graphviz SVG javascript: links

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the discourse-graphviz plugin contains a stored cross-site scripting XSS vulnerability that allows authenticated users to inject malicious JavaScript code through DOT graph definitions. F...

CVE-2026-33395 Discourse has stored click‑based XSS via Graphviz SVG javascript: links

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the discourse-graphviz plugin contains a stored cross-site scripting XSS vulnerability that allows authenticated users to inject malicious JavaScript code through DOT graph definitions. F...

CVE-2026-33395

Discourse, via the discourse-graphviz plugin, is affected by a stored XSS that can be triggered by authenticated users through DOT graph definitions. The issue is present in versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, with the vulnerability being mitigated by patches in those pat...

EUVD-2015-1141

Malware in sbrugna...

CVE-2025-58870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DeBAAT WP-GraphViz wp-graphviz allows DOM-Based XSS.This issue affects WP-GraphViz: from n/a through = 1.5.1...

WordPress WP-GraphViz Plugin <= 1.5.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin WP-GraphViz versions = 1.5.1...

PT-2025-36209

Name of the Vulnerable Software and Affected Versions: DeBAAT WP-GraphViz versions through 1.5.1 Description: The DeBAAT WP-GraphViz plugin contains a DOM-Based Cross-Site Scripting XSS issue. This improper neutralization of input during web page generation allows for potential exploitation...

CVE-2015-10131

A vulnerability was found in chrisy TFO Graphviz Plugin up to 1.9 on WordPress and classified as problematic. Affected by this issue is the function adminpageload/adminpage of the file tfo-graphviz-admin.php. The manipulation leads to cross site scripting. The attack may be launched remotely...

CVE-2015-10131

A vulnerability was found in chrisy TFO Graphviz Plugin up to 1.9 on WordPress and classified as problematic. Affected by this issue is the function adminpageload/adminpage of the file tfo-graphviz-admin.php. The manipulation leads to cross site scripting. The attack may be launched remotely...

CVE-2015-10131

CVE-2015-10131 affects the chrisy TFO Graphviz Plugin for WordPress (up to version 1.9). The vulnerability targets the admin_page_load/admin_page function in tfo-graphviz-admin.php, enabling cross-site scripting that can be triggered remotely. A fix is available in version 1.10, and the patch is ...

CVE-2015-10131 chrisy TFO Graphviz Plugin tfo-graphviz-admin.php admin_page cross site scripting

A vulnerability was found in chrisy TFO Graphviz Plugin up to 1.9 on WordPress and classified as problematic. Affected by this issue is the function adminpageload/adminpage of the file tfo-graphviz-admin.php. The manipulation leads to cross site scripting. The attack may be launched remotely...

PT-2024-10564 · Unknown · Chrisy Tfo Graphviz Plugin

Name of the Vulnerable Software and Affected Versions: chrisy TFO Graphviz Plugin versions up to 1.9 Description: A vulnerability was found in the chrisy TFO Graphviz Plugin, which is classified as problematic. The issue affects the function admin page load/admin page of the file...