1163225 matches found
CVE-2026-66606: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...
Cross-site Scripting (XSS)
Overview org.springframework:spring-webflux is a Spring Framework module that contains support for reactive HTTP and WebSocket clients as well as for reactive server web applications including REST, HTML browser, and WebSocket style interactions. Affected versions of this package are vulnerable t...
PT-2026-78981
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
CVE-2026-66615: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
CVE-2026-71368: Improper Neutralization of Input During Web Page Generation
F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...
org.springframework.integration:spring-integration-groovy (7.1.0) potentially affected by CVE-2026-59321 via org.springframework.integration:spring-integration-scripting (7.1.0)
org.springframework.integration:spring-integration-scripting MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-scripting and may be impacted: -...
org.springframework.integration:spring-integration-groovy (>=7.0.0-m1, <=7.0.5) potentially affected by CVE-2026-59321 via org.springframework.integration:spring-integration-scripting (>=7.0.0-m1, <=7.0.5)
org.springframework.integration:spring-integration-scripting MAVEN version =7.0.0-m1, =7.0.0-m1, =7.0.5 Source cves: CVE-2026-59321 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKINTEGRATION-19265077...
Race Condition
Overview Affected versions of this package are vulnerable to Race Condition via the ScriptEngine process. An attacker can access sensitive data from other requests or cause unexpected exceptions by triggering concurrent script evaluations. Remediation Upgrade...
CVE-2026-66612: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...
CVE-2026-66582: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...
CVE-2026-77643: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...
JetBrains YouTrack < 2026.2.18068 Stored XSS (CVE-2026-75048)
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18068. It is, therefore, affected by a stored cross-site scripting vulnerability: - Stored XSS via the fenced code-block language label was possible. CVE-2026-75048 Note that Nessus has not tested for this issue but...
CVE-2026-66581: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...
PT-2026-78966
Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...
PT-2026-78972
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
CVE-2026-66590: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...
CVE-2026-73402: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
PT-2026-79078
Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can create a file with an HTML payload in its name can trigger stored cross-site scripting when a user browses a directory served with MG ENABLE DIRLIST. The printdirentry path called by listdir in src/http.c...