1163477 matches found
CVE-2026-78273 WordPress Fluent Boards Pro plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78261 WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...
EUVD-2026-66994
Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...
CVE-2026-47877 Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6...
CVE-2026-47877 Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6...
CVE-2026-47877
Spring Security Authorization Server is vulnerable to Cross-Site Scripting (XSS) in its default consent page, which renders user-controlled values without HTML entity encoding. The flaw allows an attacker to inject scripts via crafted input reflected on the consent page, requiring user interactio...
PT-2026-82542
Name of the Vulnerable Software and Affected Versions DoXBASE versions prior to 27082026 Description Improper neutralization of input during web page generation leads to a cross-site scripting XSS flaw, which allows Cross Zone Scripting. Cross-site scripting is a type of security flaw where...
PT-2026-82455
Name of the Vulnerable Software and Affected Versions Fluent Boards Pro versions prior to 2.0.12 Description Cross Site Scripting XSS exists in the software, allowing users with Subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update to version...
PT-2026-82464
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
NethServer WebTop 1.5.6 Cross Site Scripting
NethServer WebTop module versions 1.5.6 and below suffer from two persistent cross site scripting vulnerabilities...
CVE-2026-78289: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
CVE-2026-78283: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...
CVE-2026-5738: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE allows Cross Zone Scripting. This issue affects DoXBASE: through 27082026. NOTE: The vendor was contacted early about this disclosur...
CVE-2026-5218: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...
PT-2026-82459
Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...
PT-2026-82845
A Cross-Site Scripting XSS vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenticated administrator user to execute arbitrary JavaScript in another user's browser...
PT-2026-82446
Name of the Vulnerable Software and Affected Versions Spring Security OAuth2 Authorization Server versions 7.0.0 through 7.0.4 Description When Dynamic Client Registration is enabled, the registration endpoint does not sufficiently validate certain client metadata fields provided by the registeri...
PT-2026-82460
Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...
PT-2026-82453
Name of the Vulnerable Software and Affected Versions Realtyna Organic IDX plugin versions prior to 5.4.2 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...