CVE-2026-102378

Unauthenticated Cross Site Scripting XSS in Parallax Section block = 2.0.4 versions...

EUVD-2026-90844

Unauthenticated Cross Site Scripting XSS in Parallax Section block = 2.0.4 versions...

CVE-2026-102378 WordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Parallax Section block = 2.0.4 versions...

CVE-2026-102378

The Parallax Section block plugin for WordPress (versions

CVE-2026-102378 WordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Parallax Section block = 2.0.4 versions...

WordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin Parallax Section block versions = 2.0.4...

CVE-2026-102378: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Parallax Section block = 2.0.4 versions...

PT-2026-103876

Unauthenticated Cross Site Scripting XSS in Parallax Section block = 2.0.4 versions...

Malicious code in levels-parallax-janus-atlas (npm)

The package levels-parallax-janus-atlas was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-90943 parallax filament-comments through 3.0.0 Stored XSS via Comment Body

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

CVE-2026-90943 parallax filament-comments through 3.0.0 Stored XSS via Comment Body

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

CVE-2026-90943 parallax filament-comments through 3.0.0 Stored XSS via Comment Body

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

CVE-2026-90943

parallax/filament-comments (through 3.0.0 ) contains a stored cross-site scripting vulnerability in comment body rendering. The root cause is unescaped output in the comment display views (comments.blade.php) and policy layer, allowing authenticated panel users to inject malicious scripts into co...

CVE-2026-90943: Improper Neutralization of Input During Web Page Generation

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)

Source: amazon-inspector 3ecf14a07cd348f4aef4bf71dd063f333aee890c7b9fffa4af049cac1d997ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in gulp-prettier-spinner-parallax (npm)

Source: amazon-inspector fc58ea571f5bd14201e5b992627f478b50a21460535b722143de565ef267bf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eigenstate-areology-deneb-parallax (npm)

Source: amazon-inspector 49b8bfef5c3eda4a83b38cc5fe6975c46300f0d47842e14e6defff8018f0c2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eigenstate-parallax-init-miranda (npm)

The package eigenstate-parallax-init-miranda was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in draco-parallax-mineralogy-quantum (npm)

The package draco-parallax-mineralogy-quantum was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in deneb-parallax-aldebaran-prettier (npm)

Source: amazon-inspector 62fdac9fb115059473ddb39de7308936fb34fee96693299f3e1aa1c9d0719d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...