1162548 matches found
tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example
A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...
tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example
A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...
CVE-2026-66579
Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...
CVE-2026-66574
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
CVE-2026-78294 WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
CVE-2026-66617: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in PublishPress Series = 3.1.3 versions...
CVE-2025-15697: Improper Neutralization of Input During Web Page Generation
The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request...
PT-2026-94263
Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...
CVE-2026-66572: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in JetBlog = 2.4.10 versions...
CVE-2026-90887: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Inventory Manager = 2.5.4 versions...
CVE-2026-66578: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in PropertyHive = 2.2.6 versions...
CVE-2026-90986: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.21 versions...
CVE-2026-92973: Improper Neutralization of Input During Web Page Generation
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...
CVE-2026-66579: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...
PT-2026-94343
Name of the Vulnerable Software and Affected Versions Vendure versions prior to 3.6.5 Description Stored cross-site scripting XSS exists in the admin dashboard due to unsafe HTML stripping in the RichTextDescriptionCell component within...
CVE-2026-66573: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in JetTabs = 2.3.3.1 versions...
CVE-2026-78294: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
CVE-2026-66577: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...
