PT-2026-108823

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through 8.44...

PT-2026-108864

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.3...

PT-2026-108824

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects Kubio AI Page Builder: from n/a through 2.9.3...

PT-2026-108829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-blocks allows Reflected XSS.This issue affects BlockStrap Page Builder - Bootstrap Blocks: from n/a through 0.1.58...

PT-2026-108830

Name of the Vulnerable Software and Affected Versions UsersWP versions prior to 1.2.74 Description UsersWP contains a Reflected Cross-site Scripting XSS flaw, which occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing an attacker to...

PT-2026-108820

🚨 CVE-2026-94158 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.This issue affects Gloria Admin Panel: from n/a through 1.3. 🎖@cveNotify...

PT-2026-108837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5...

PT-2026-108822

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a before 7.0.11...

PT-2026-108862

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This issue affects NEX-Forms: from n/a through 9.3.1...

PT-2026-108831

Name of the Vulnerable Software and Affected Versions JetBlog versions prior to 2.4.11 Description Improper neutralization of input during web page generation allows Reflected Cross-site Scripting XSS, a flaw where an application includes untrusted data in a web page without proper validation or...

PT-2026-108842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5...

PT-2026-108825

🚨 CVE-2026-94170 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Reflected XSS.This issue affects Sassy Social Share: from n/a through 3.3.79. 🎖@cveNotify...

PT-2026-108916

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SpabRice Pond pond allows Reflected XSS.This issue affects Pond: from n/a through 2.6.1...

PT-2026-108899

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bracketweb Treck treck allows Reflected XSS.This issue affects Treck: from n/a through 1.0.0...

PT-2026-108901

Name of the Vulnerable Software and Affected Versions Bracketweb Voldor versions prior to 1.0.0 Description Bracketweb Voldor is subject to Reflected Cross-site Scripting XSS, which occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing an...

PT-2026-108900

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bracketweb Ogency ogency allows Reflected XSS.This issue affects Ogency: from n/a through 1.0.0...

PT-2026-108883

Name of the Vulnerable Software and Affected Versions WP Associate Post R2 versions prior to 5.0.2 Description WP Associate Post R2 contains a Reflected Cross-site Scripting XSS flaw, which occurs when an application includes untrusted data in a web page without proper validation or encoding,...

PT-2026-108882

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Datasolution AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through 11.1.0...

PT-2026-108913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Education Center education allows Reflected XSS.This issue affects Education Center: from n/a through 3.6.12...

PT-2026-108861

Name of the Vulnerable Software and Affected Versions FiboSearch versions prior to 1.34.2 Description Improper neutralization of input during web page generation allows Reflected Cross-site Scripting XSS, a flaw where malicious scripts are reflected off a web application to the victim's browser...