1163314 matches found
RHEL 10 : grafana (RHSA-2026:63022)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63022 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail:...
Shifting from Injection to Interaction: Rethinking Web Security in the Age of LLMs and Beyond
Large language models LLMs are becoming integral to web applications and browser agents, transforming online interactions while introducing new attack vectors and reshaping longstanding web vulnerabilities. Classical threats such as cross-site scripting XSS can be amplified through LLM-mediated...
PT-2026-85089
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
PT-2026-85086
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
ALSA-2026:63022 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...
PT-2026-85087
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
CVE-2026-2573: Improper Neutralization of Input During Web Page Generation
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This mak...
PT-2026-85220
A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched remotely. The exploit is publicly availab...
CVE-2026-81776: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-81281: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
CVE-2026-84773: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
CVE-2026-84763: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
CVE-2026-84812: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...
CVE-2026-81292: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
PT-2026-85111
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
PT-2026-85092
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
PT-2026-85110
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
PT-2026-85088
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...