EUVD-2026-17095

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2003-1353: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Outreach Project Tool OPT 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field...