CVE-2026-97328 WebP Express < 0.25.16 - Unauthenticated Stored XSS via Alter HTML Parser

The WebP Express WordPress plugin before 0.25.16 does not escape values that its bundled HTML parser re-emits into element attributes when a non-default image delivery mode is enabled, allowing unauthenticated users to submit content that is stored and later executed as Cross-Site Scripting in th...

ApostropheCMS: Stored XSS Via Unescaped Widget Style Attribute Serialization

Summary ApostropheCMS widget styles support project-defined schema fields. If a project defines a free-form "string" style field with a CSS "property" and no selector, an editor-controlled value is rendered as an inline CSS declaration. The resulting declaration is then inserted into the widget...

EUVD-2026-107887

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcubeutils::modcssstyles did not treat an at-rule prologue such as @layer a; as a selector boundary, and did not handle selectors beginning with ::, so selectors following an at-rule were...

CVE-2026-114722

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcubeutils::modcssstyles did not treat an at-rule prologue such as @layer a; as a selector boundary, and did not handle selectors beginning with ::, so selectors following an at-rule were...

CVE-2026-114722

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcubeutils::modcssstyles did not treat an at-rule prologue such as @layer a; as a selector boundary, and did not handle selectors beginning with ::, so selectors following an at-rule were...

CVE-2026-96382

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2...

CLEANSTART-2026-KR31845 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the etcd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-GZ10195 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the etcd package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

PT-2026-121277

The WebP Express WordPress plugin before 0.25.16 does not escape values that its bundled HTML parser re-emits into element attributes when a non-default image delivery mode is enabled, allowing unauthenticated users to submit content that is stored and later executed as Cross-Site Scripting in th...

PT-2026-134729

Security vulnerability affects the etcd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

PT-2026-134716

Security vulnerability affects the etcd package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

PT-2026-121581

Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go that interpolates display names and task and project titles raw into email anchors. Authenticated users can craft titles or display names that close the anchor and inject...

ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-120954

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube utils::mod css styles did not treat an at-rule prologue such as @layer a; as a selector boundary, and did not handle selectors beginning with ::, so selectors following an at-rule we...

PT-2026-121407

OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.1, Html::commandButton in lib/Html.class.php embeds an action URL containing a stored computer hostname into a JavaScript string in an inline onclick...

Georg Sieber Open Computer Orchestration Cross-site Scripting Vulnerability

Versions of Georg Sieber Open Computer Orchestration prior to 1.2.1 contain a cross-site scripting vulnerability. This vulnerability arises because Html::commandButton embeds action URLs containing stored computer hostnames into JavaScript strings within its inline onclick handler; only HTML...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from incomplete recognition of CSS escape sequences when processing the FuncIRI attribute, allowing remote content to be bypassed. As a...

CVE-2026-113304

A flaw was found in chromium-browser. A memory corruption vulnerability in the Graphics Processing Unit GPU component can lead to information disclosure. A remote attacker could exploit this flaw by convincing a user to visit a specially crafted HTML page, potentially allowing the attacker to rea...

CVE-2026-113225

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to cause information disclosure by triggering memory corruption through a specially crafted HTML page. By convincing a user to open the malicious page, an attacker can read memory contents within the browser's...

CVE-2026-113223

A flaw was found in the DevTools component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by tricking a user into loading a specially crafted HTML page. Successful exploitation could allow the attacker to read memory within the sandbox environment,...