Semantic MediaWiki cross-site scripting vulnerability

Versions 3.0.0 through 7.3.1 of Semantic MediaWiki contain a cross-site scripting vulnerability. This stems from a stored XSS issue, allowing users with page editing privileges to inject HTML via Keyword-type attribute values that are not escaped when rendered on Special:Browse. Attackers can...

CKEditor Ecosystem CKEditor 5 Cross-site Scripting Vulnerability

The CKEditor ecosystem contains a cross-site scripting vulnerability in versions 29.0.0 through 47.7.4 and 48.0.0 through 48.5.1 of CKEditor 5. This vulnerability arises when General HTML Support is enabled and object content is permitted; specially crafted tags can trigger cross-site scripting,...

PT-2026-127220

Name of the Vulnerable Software and Affected Versions CKEditor 5 versions 29.0.0 through 47.7.3 CKEditor 5 versions 48.0.0 through 48.5.0 Description Specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and configured to allow object content. Processing...

PT-2026-126595

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159...

PT-2026-126598

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159...

Google Chrome Vulnerability: CVE-2026-118317

Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a buffer error vulnerability. This vulnerability stems from memory corruption in Turbolev; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code outside the sandbox...

PT-2026-126526

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126503

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the DOM: HTML Parser component. Use-after-free is a memory...

PT-2026-126508

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126523

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTML component. A use-after-free occurs...

PT-2026-126533

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird version prior to 153.6 Description Incorrect boundary conditions exist within the DOM: Core &...

PT-2026-126543

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A spoofing issue exists within the DOM: Core & HTML component. Recommendations Update Firefox t...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from post-free reuse in the DOM: Core & HTML...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 115.44, Mozilla Firefox ESR versions prior to 153.6, Mozilla Thunderbird versions prior to 159, and Mozilla Thunderbird versions prior to 153.6. This vulnerability stems from a...

PT-2026-126532

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126551

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126515

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTML components. A use-after-free occurs...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a buffer error vulnerability. This vulnerability stems from memory corruption in HTML, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

WPProbe Plugin Enumeration Tool 0.12.13

A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...