CVE-2026-112379

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through 1.3.68...

CVE-2026-114703 WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

CVE-2026-114703 WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

EUVD-2026-108083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicdark ND Shortcodes For Visual Composer nd-shortcodes allows Stored XSS.This issue affects ND Shortcodes For Visual Composer: from n/a through 7.8...

EUVD-2026-108053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through 1.3.68...

CVE-2026-114184

The WPVibes Elementor Addon Elements plugin (specifically addon-elements-for-elementor-page-builder) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions from n/a through 1.14.4 . Exploitation details ar...

CVE-2026-114184 WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through 1.14.4...

CVE-2026-96382

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2...

EUVD-2026-107810

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2...

CVE-2026-96382 Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2...

CVE-2026-76475 Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...

CVE-2026-76475

Several Cisco Unified Communications Products are affected by Cross-site Scripting (XSS) vulnerabilities, specifically involving improper neutralization of input during web page generation (CWE-79 ). Impacted products include Cisco Emergency Responder , Cisco Prime Collaboration Deployment , Cisc...

CVE-2026-111848 WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22...

CVE-2026-111848

The Geo Mashup WordPress plugin (versions

CVE-2026-111848 WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22...

CVE-2026-107435

The WP Chill Strong Testimonials WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This security flaw affects versions from n/a through 3.3.12 . While the vulnerability allows for script execution in the con...

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-112833 WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0...

CVE-2026-112833

The Castos Seriously Simple Podcasting plugin for WordPress (versions n/a through 3.17.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This vulnerability stems from the improper neutralization of input during web page generation. An attacker could potentially execute malicious scripts in...