879 matches found
CVE-2026-86606
The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin before 3.13.7 does not properly escape content it re-emits through its bundled HTML parser, allowing unauthenticated users to inject arbitrary web scripts in pages that will execute in the session of any...
CVE-2026-86606
The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin versions before 3.13.7 is vulnerable to an unauthenticated stored XSS vulnerability. The root cause is a failure to properly escape content re-emitted through its bundled HTML parser . This allows unauthent...
CVE-2026-86606 iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parser
The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin before 3.13.7 does not properly escape content it re-emits through its bundled HTML parser, allowing unauthenticated users to inject arbitrary web scripts in pages that will execute in the session of any...
EUVD-2026-117906
The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin before 3.13.7 does not properly escape content it re-emits through its bundled HTML parser, allowing unauthenticated users to inject arbitrary web scripts in pages that will execute in the session of any...
CVE-2026-78661
A flaw was found in golang.org/x/net/html. A remote attacker can cause a Denial of Service DoS by providing specially crafted HTML input containing numerous short text fragments separated by ignored tags. When combining adjacent text nodes, the parser repeatedly reallocates and copies memory for...
CVE-2026-101895
A flaw was found in Angular's platform-server component. When performing Server-Side Rendering SSR, the HTML parser fails to properly handle malformed DOCTYPE declarations that end with trailing whitespace, leading to an infinite processing loop. A remote, unauthenticated attacker can exploit thi...
CLEANSTART-2024-SL56993 Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers
Security vulnerability affects the librewolf package. Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers...
CVE-2026-109234
The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 5.6.4 . The root cause is insufficient input sanitization and output escaping of the post_content (bbPress reply body) parameter. An unauthenticated attacker can inject arbitr...
CVE-2026-109234 Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization
The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent bbPress reply body' parameter in all versions up to, and including, 5.6.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-109234 Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization
The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent bbPress reply body' parameter in all versions up to, and including, 5.6.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
VUL4J-59
jsoup: Java HTML parser that makes sense of real-world HTML soup. jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification...
CLEANSTART-2024-RH40188 Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers
Security vulnerability affects the firefox package. Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers...
CVE-2026-117920
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...
CVE-2026-117883
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...
CVE-2026-117920
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117883
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
Linux Distros Unpatched Vulnerability : CVE-2026-117883
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...
Linux Distros Unpatched Vulnerability : CVE-2026-117920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
