PT-2026-77803

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Scripting allows a low privileged attacker with network access via HTTP to compromise the system. This c...

PT-2026-78013

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Workbench component allows a low-privileged attacker with network access via HTTP to compromise the system. The exploitation requires...

CVE-2026-30250

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...

PT-2026-77065

Name of the Vulnerable Software and Affected Versions Featured Video Plus versions prior to 2.3.4 Description Cross Site Scripting XSS allows an attacker with contributor privileges to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than 2.3.3...

CVE-2026-32333: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Mayosis Core = 5.4.7 versions...

CVE-2026-70810: Improper Access Control

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successfu...

CVE-2025-9211: Improper Neutralization of Input During Web Page Generation

Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting...

CVE-2026-66645: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...

CVE-2026-66641: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66640: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...

CVE-2026-66637: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-74902: Improper Neutralization of Input During Web Page Generation

SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fails to escape filenames before inserting them into HTML via insertAdjacentHTML. Attackers can craft a malicious filename containing script payloads that execute with full OS command access...

CVE-2026-73426: Improper Neutralization of Input During Web Page Generation

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...

CVE-2026-73393: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...

CVE-2026-73362: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in URL Shortify = 2.5.0 versions...

CVE-2026-73351: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-30250: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...

PT-2026-80393

Apache Answer vulnerable to Cross-site Scripting in github.com/apache/answer...

CVE-2026-73375: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...

PT-2026-77804

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Scripting product allows a low privileged attacker with network access via HTTP to compromise the...