399 matches found
CVE-2026-8875
The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...
EUVD-2026-32083
The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...
CVE-2026-8875
Affected software : WordPress plugin Easy Prism Syntax Highlighter (versions ≤ 1.0.2). Vulnerability : Stored Cross-Site Scripting via the plugin’s 'code' and 'c' shortcode attributes due to insufficient input sanitization and output escaping in shortcode(), which concatenates the first positiona...
CVE-2026-8875 Easy Prism Syntax Highlighter <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...
CVE-2026-8875
The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...
WordPress plugin Easy Prism Syntax Highlighter 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
GHSA-Q8MJ-M7CP-5Q26 vulnerabilities
Vulnerabilities for packages: thingsboard, json-server, opensearch-dashboards, code-server, sqlpad, tileserver-gl, langfuse, kubeflow-pipelines, saf, argo-workflows, renovate, kubeflow-centraldashboard, prism...
CVE-2026-8723 vulnerabilities
Vulnerabilities for packages: thingsboard, json-server, opensearch-dashboards, code-server, sqlpad, tileserver-gl, langfuse, kubeflow-pipelines, saf, argo-workflows, renovate, kubeflow-centraldashboard, prism...
CVE-2026-8723 vulnerabilities
Vulnerabilities for packages: unleash, kubeflow-pipelines, prism, thingsboard, json-server, thingsboard-fips, sqlpad, kibana, tileserver-gl, tileserver-gl-fips, renovate, redisinsight, pelias-api, langfuse, opensearch-dashboards, code-server, opensearch-dashboards-fips, argo-workflows,...
GHSA-Q8MJ-M7CP-5Q26 vulnerabilities
Vulnerabilities for packages: unleash, kubeflow-pipelines, prism, thingsboard, json-server, thingsboard-fips, sqlpad, kibana, tileserver-gl, tileserver-gl-fips, renovate, redisinsight, pelias-api, langfuse, opensearch-dashboards, code-server, opensearch-dashboards-fips, argo-workflows,...
WordPress Easy Prism Syntax Highlighter plugin <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Easy Prism Syntax Highlighter versions = 1.0.2...
GHSA-Q3J6-QGPJ-74H6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, tileserver-gl, langfuse, saf, argo-workflows, vitess, prism...
CVE-2026-6321 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, tileserver-gl, langfuse, saf, argo-workflows, vitess, prism...
GHSA-Q3J6-QGPJ-74H6 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, keep-fips, langfuse-fips, arangodb, opensearch-dashboards-fips, tileserver-gl-fips, wazuh-dashboard, vitess, kibana, saf, langfuse, opensearch-dashboards, prism, tileserver-gl, keep, argo-workflows...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, prism, sqlpad, kibana, dbgate-fips, gemini-cli, npm, renovate, redisinsight, jitsucom-jitsu, langfuse, opensearch-dashboards, code-server, opensearch-dashboards-fips, dbgate, argo-workflows, langfuse-fips, librechat, wazuh-dashboard-fips,...
Security Bulletin: There is a vulnerability in prismjs-1.23.0.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite ( CVE-2021-32723)
Summary There is a vulnerability in prismjs-1.23.0.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2021-32723 DESCRIPTION: Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of...
CVE-2026-5944
An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication. An unauthenticated...
CVE-2026-5944 Cisco Intersight Device Connector for Nutanix Prism Central Unauthenticated API Access
An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication. An unauthenticated...
CVE-2026-5944 Cisco Intersight Device Connector for Nutanix Prism Central Unauthenticated API Access
An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication. An unauthenticated...
CVE-2026-5944
An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication. An unauthenticated...