Lucene search
+L

112096 matches found

OSV
OSV
added 2026/07/23 1:16 p.m.20 views

CVE-2026-65899 DOMPurify before 3.4.9 Trusted Types Policy State Contamination

DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig is called, so a DOMPurify instance reused across trust boundaries stays bound to a previously supplied TRUSTEDTYPESPOLICY. A later caller that requests RETURNTRUSTEDTYPE output receives a TrustedHTML...

5.1CVSS5.6AI score
SaveExploits0References5
OSV
OSV
added 2026/07/23 11:41 a.m.17 views

PYSEC-2026-3471 OpenStack Ironic allows Boot Script Injection

OpenStack Ironic through 35.0.x allows Boot Script Injection...

5.8CVSS5.2AI score0.00432EPSS
SaveExploits0References8
PyPA
PyPA
added 2026/07/23 11:41 a.m.34 views

OpenStack Ironic allows Boot Script Injection

OpenStack Ironic through 35.0.x allows Boot Script Injection...

7.7CVSS5.1AI score0.00432EPSS
SaveExploits0References8Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/23 11:18 a.m.13 views

CVE-2026-65488 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...

7.1CVSS5.2AI score0.00128EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/07/23 11:04 a.m.11 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: High...

6.1CVSS6AI score0.0022EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/23 11:04 a.m.11 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

6.1CVSS6AI score0.0022EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/23 11:04 a.m.10 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

6.1CVSS6AI score0.0022EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/23 11:04 a.m.6 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS6AI score0.0022EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/23 11:04 a.m.10 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

6.1CVSS6AI score0.0022EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/23 11:04 a.m.10 views

Astra Linux – Vulnerability in Chromium

The incorrect security interface in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML through a crafted HTML page. Chromium security severity: Medium...

4.2CVSS5.9AI score0.00158EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/23 11:04 a.m.9 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Network component of Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML through a crafted HTML page. Chromium security severity: Medium...

6.1CVSS6AI score0.0022EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/23 10:16 a.m.12 views

CVE-2026-15394

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00331EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/07/23 9:33 a.m.15 views

CVE-2026-15394 Header Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.5AI score0.00331EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/23 9:33 a.m.18 views

CVE-2026-15394

The CVE-2026-15394 entry concerns the WordPress plugin “Header Footer Script Adder – Insert Code in Header, Body & Footer.” According to connected sources, all versions up to and including 2.1 are vulnerable to Stored Cross-Site Scripting via the ‘asm_code’ Snippet Meta due to insufficient input ...

6.4CVSS5.6AI score0.00331EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/23 9:33 a.m.14 views

EUVD-2026-47906

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.6AI score0.00331EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/23 9:33 a.m.38 views

CVE-2026-15394 Header Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00331EPSS
SaveExploits0References5
attackerkb
attackerkb
added 2026/07/23 8:34 a.m.10 views

CVE-2026-14481

The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'html' parameter in all versions up to, and including, 1.46.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.6AI score0.00419EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2026/07/23 8:34 a.m.36 views

CVE-2026-15647 Brands for WooCommerce <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field

The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'brbrandtooltip' Term Meta Field in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS0.00311EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/23 7:16 a.m.25 views

CVE-2026-9066

The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query parameter that controls the asset CDN host before using it to build the URLs of JavaScript files emitted on the page, leading to Reflected XSS. When a visitor follows a crafted link, the WP Compress WordPress...

6.1CVSS0.00253EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/07/23 6:52 a.m.17 views

CVE-2026-9635

The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the tab shortcode in versions up to, and including, 1.4.17. This is due to insufficient input sanitization and output escaping in the mtstabs function, which outputs the...

6.4CVSS5.5AI score0.00321EPSS
SaveExploits0References4
Rows per page
Query Builder