CVE-2022-1051

CVE-2022-1051 WPQA 5.2 - Subscriber+ 権限でプロフィールフィールドを介した格納型クロスサイトスクリプティング 説明 Discy および Himer テーマのコンパニオンプラグインとして使用されるこのプラグインは、プロフィールページで出力する際に、市区町村、電話番号、プロフィール認証情報の各フィールドをサニタイズおよびエスケープしないため、認証済みの任意のユーザーがクロスサイトスクリプティング攻撃を実行できます。 概念実証 プロフィールを編集し、エスケープされていないフィールドのいずれかに次のペイロードを追加してください。...

CVE-2026-90773

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals...

UBUNTU-CVE-2026-90773

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals...

CVE-2026-90773

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals...

CVE-2025-15690

CVE-2025-15690 is a Stored Cross-Site Scripting (XSS) vulnerability in the Content Mask WordPress plugin, affecting versions 1.7.1 through 1.8.5.5 . The root cause is improper sanitization and escaping of post content—specifically scripts and styles submitted by an author—before being output in g...

CVE-2026-82846

CVE-2026-82846 affects the Masteriyo LMS WordPress plugin, versions 1.18.0 through 2.3.3 . The vulnerability is a Stored XSS in course custom fields: the plugin fails to sanitize and escape certain course settings before outputting them on a page accessible to all visitors. Users with the course-...

EUVD-2026-70362

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...

EUVD-2026-69792

NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store malicious HTML with event handlers. Attackers can write arbitrary markup through the collection API that executes in the browsers of all users viewing the affected record...

CVE-2026-82661

Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message headers. An attacker with control over list..comment parameters can inject CRLF sequences to create additional headers in generated RFC822...

CVE-2026-80488

WP Ultimate CSV Importer WordPress plugin versions before 9.0 contain a SQL injection vulnerability in the AIOSEO Import Fields feature. Imported field values are not properly sanitised or escaped before being used in a SQL statement, allowing high-privilege users (admin and above) to execute arb...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hibernate-validator (UTSA-2026-093189)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093189 advisory. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in...

CVE-2026-79780 rclone before v1.75.0 Credential Exposure via S3 Redirect

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

CVE-2026-13405 Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom widget markup before writing it to a file that is later executed, allowing users with the manageoptions capability and, on WordPress Multisite, non-super subsite administrators who do not otherwise...

CVE-2026-16974

The CVE concerns the Kirki – Freeform Page Builder, Website Builder & Customizer WordPress plugin. It is vulnerable to Stored Cross-Site Scripting via the post_meta Shortcode in all versions up to 6.2.0 due to insufficient input sanitization and output escaping. Consequence: authenticated attacke...

EUVD-2026-53870

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the elementpackcontactform AJAX action. This is due to insufficient sanitization of newline characters in user-supplied input that gets concatenated...

DRUPAL-CONTRIB-2026-094

The Entity Browser module allows you to select entities from entity reference fields using a custom entity browser widget. The module doesn't sufficiently sanitize the the tab titles, resulting in a stored cross-site scripting XSS vulnerability. The vulnerability is mitigated by the fact an...

EUVD-2025-210616

The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and escape a place-category setting before outputting it back in an admin page, allowing high-privilege users such as editors and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

EUVD-2026-51698

The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile page, allowing users with a subscriber-level account to inject JavaScript that executes in the browser of any visitor wh...

UBUNTU-CVE-2026-65904

DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...

CVE-2026-9588 Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal

A stored cross-site scripting XSS vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997 within the voicemail notification template functionality. The submitmodifyvoicemailtemplate endpoint fails to properly sanitize HTML content supplied by authenticated users, allowing malicious...