11927 matches found
CVE-2026-81760
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Crocoblock JetEngine WordPress plugin, affecting versions up to and including 3.8.14.2 . The flaw stems from improper neutralization of input during web page generation , allowing an attacker to inject malicious scripts that execu...
CVE-2026-5953 Reflected XSS in Ceviz Informatics's Web Design
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
EUVD-2026-67723
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
CVE-2026-5953
Ceviz Informatics Inc. Web Design is affected by a Reflected XSS vulnerability caused by improper input neutralization during web page generation. The issue affects versions through 25082026 . The CVSS 3.1 score is 6.1 (Medium) with a changed scope and low confidentiality/integrity impact. No rem...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Improper neutralization of parameter/argument delimiters in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-5800 Reflected XSS in Dayneks Software's E-Commerce Platform
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...
CVE-2026-5800
CVE-2026-5800 is a Reflected XSS vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform , caused by improper neutralization of input during web page generation. It affects versions through 28082026 . The CVSS 3.1 score is 6.1 (MEDIUM) with a changed scope, requiring user in...
EUVD-2026-67722
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...
CVE-2026-82123
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...
EUVD-2026-67459
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...
CVE-2026-82123 WordPress Loops & Logic - Reflected XSS
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...
CVE-2026-82123
CVE-2026-82123 is a reflected cross-site scripting (XSS) vulnerability in the Tangible Loops & Logic WordPress plugin, caused by improper neutralization of input during web page generation. Per the assigned CVSS 3.1 score of 6.5 (Medium) , the attack vector is network-based with low complexity, r...
PT-2026-83140
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
CVE-2026-4378: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 before 4.6.001...
CVE-2026-55841: Improper Neutralization of Special Elements
Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate key-value syslog parser in graylog2-server/src/main/java/org/graylog2/inputs/codecs/GLFortiGateSyslogEvent.java and...
The vulnerability of the software platform for conducting marketing campaigns with Adobe Campaign Classic lies in the lack of measures to neutralize special elements, allowing a violator to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the software platform for conducting marketing campaigns with Adobe Campaign Classic lies in the lack of measures to neutralize special elements, allowing a violator to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-83136
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...
PT-2026-83151
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...