RHEL 8 : xmlrpc-c (RHSA-2026:61233)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61233 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

RHEL 9 : osbuild-composer (RHSA-2026:61585)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61585 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

RHEL 7 : xmlrpc-c (RHSA-2026:61234)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61234 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

RHEL 9 : xmlrpc-c (RHSA-2026:61316)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61316 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

RHEL 9 : xmlrpc-c (RHSA-2026:61315)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61315 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

PT-2026-84024

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

PT-2026-83671

A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for...

PT-2026-84003

Unauthenticated Cross Site Scripting XSS in Email Subscribers & Newsletters = 5.9.33 versions...

PT-2026-84008

Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...

PT-2026-84029

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...

CVE-2026-76986: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.AbstractSingleSelectChoice, the base class of DropDownChoice, writes the body of the default option — the entry shown when no choice is selected — into the markup as it is, while every...

CVE-2026-81298: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...

CVE-2026-82865: Improper Neutralization of Input During Web Page Generation

pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that assigns unsanitized i18n label values to innerHTML. Attackers who control label overrides through options.labels can inject arbitrary JavaScript that executes when users open the...

CVE-2026-81291: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Uncode = 2.12.7 versions...

PT-2026-83845

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

PT-2026-84025

Name of the Vulnerable Software and Affected Versions SliceWP versions 1.2.10 and earlier Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...

PT-2026-83883

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument classDef/style results in cross site scripting. The attack may be launched remotely. The exploit has been made public and...

RHEL 9 : xmlrpc-c (RHSA-2026:61232)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61232 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

PT-2026-84015

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

PT-2026-84016

Name of the Vulnerable Software and Affected Versions Kalles Addons versions prior to 1.0.7 Description Cross Site Scripting XSS exists in the subscriber functionality, allowing an attacker to execute malicious scripts in the browser of other users. Recommendations Update Kalles Addons to version...