6159 matches found
CVE-2026-5800
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...
CVE-2026-5953
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
CVE-2026-4378
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 before 4.6.001...
EUVD-2026-67740
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 through 28082026. NOTE: The vendor was contacted early about this...
CVE-2026-4378
A Stored Cross-Site Scripting (XSS) vulnerability in Akilli Ticaret Software Technologies Ltd. 's E-Commerce Pack (versions 4.5.001 through 28082026) is caused by improper neutralization of input during web page generation . The CVSS 3.1 score is 5.4 (MEDIUM) with a changed scope, indicating a lo...
EUVD-2026-67732
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...
CVE-2026-81760 WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...
CVE-2026-81760
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Crocoblock JetEngine WordPress plugin, affecting versions up to and including 3.8.14.2 . The flaw stems from improper neutralization of input during web page generation , allowing an attacker to inject malicious scripts that execu...
CVE-2026-5953 Reflected XSS in Ceviz Informatics's Web Design
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
EUVD-2026-67723
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
CVE-2026-5953
Ceviz Informatics Inc. Web Design is affected by a Reflected XSS vulnerability caused by improper input neutralization during web page generation. The issue affects versions through 25082026 . The CVSS 3.1 score is 6.1 (Medium) with a changed scope and low confidentiality/integrity impact. No rem...
CVE-2026-5800 Reflected XSS in Dayneks Software's E-Commerce Platform
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...
EUVD-2026-67722
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...
CVE-2026-5800
CVE-2026-5800 is a Reflected XSS vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform , caused by improper neutralization of input during web page generation. It affects versions through 28082026 . The CVSS 3.1 score is 6.1 (MEDIUM) with a changed scope, requiring user in...
CVE-2026-82123
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...
EUVD-2026-67459
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...
CVE-2026-82123 WordPress Loops & Logic - Reflected XSS
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...
CVE-2026-82123
CVE-2026-82123 is a reflected cross-site scripting (XSS) vulnerability in the Tangible Loops & Logic WordPress plugin, caused by improper neutralization of input during web page generation. Per the assigned CVSS 3.1 score of 6.5 (Medium) , the attack vector is network-based with low complexity, r...
PT-2026-83140
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
The vulnerability of the software platform for conducting marketing campaigns with Adobe Campaign Classic lies in the lack of measures to neutralize special elements, allowing a violator to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...