CVE-2026-125816

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 9.0.4...

CVE-2026-125816 WordPress MapSVG plugin <= 9.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 9.0.4...

CVE-2026-119518 WordPress Royal Elementor Addons plugin <= 1.7.1070 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1070...

CVE-2026-121721 WordPress Gutenberg Blocks plugin <= 3.7.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Stored XSS.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

CVE-2026-121721

The PublishPress Gutenberg Blocks (advanced-gutenberg) plugin for WordPress versions up to and including 3.7.6 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the Improper Neutralization of Input During Web Page Generation . This flaw allows an attacker to i...

CVE-2026-92379

An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-81557

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-92379

An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

EUVD-2026-124196

An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-81557

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-81557

A vulnerability in the DSMNotify component of Synology DiskStation Manager (DSM) allows remote authenticated users to read or write specific files. This is caused by improper neutralization of input during web page generation (CWE-79). The issue affects DSM versions prior to 7.3.2-86009-5 and 7.4...

CVE-2026-125785

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through 3.9.1...

CVE-2026-125785

The Crocoblock JetEngine WordPress plugin (versions

CVE-2026-125785 WordPress JetEngine plugin <= 3.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through 3.9.1...

PT-2026-145689

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-125454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through 4.3.21...

CVE-2026-125454

The WP Chill Passster content-protector plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . This issue is caused by the improper neutralization of input during web page generation. The vulnerability affects Passster versions from n/a through 4.3.21 . Exploitation details and...

CVE-2026-125454 WordPress Passster plugin <= 4.3.21 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through 4.3.21...

CVE-2026-125743 WordPress Elementor Addon Elements plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through 1.5...

CVE-2026-125743

The WPVibes Elementor Addon Elements plugin (addon-elements-for-elementor-page-builder ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This issue affects versions n/a through 1.5 . While the vulnerability is confirmed...