1163618 matches found
SUSE CVE-2026-15920
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...
EUVD-2026-53683
A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit...
CVE-2026-18968
A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit...
CVE-2026-65517: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...
VulnCheck KEV: CVE-2018-14013
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...
CVE-2026-66711: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
CVE-2026-61961: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in EmbedPress = 4.5.6 versions...
CVE-2026-66439: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...
CVE-2026-28141: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in NextGEN Gallery = 4.2.3 versions...
CVE-2026-65545: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...
CVE-2026-61964: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...
WP < 7.0.3 - Contributor+ Stored XSS via Emoji Settings Element
Description WordPress does not properly restrict the content of submitted posts in some cases, which could allow users with a role of Contributor and above to perform Stored Cross-Site Scripting attacks against users previewing the post...
WP < 7.0.3 - Reflected XSS
Description WordPress does not escape login error message in some cases, which could lead to Reflected XSS...
WP < 7.0.3 - Contributor+ Stored XSS in Quick Edits
Description WordPress does not properly escape user display names in some cases, which could allow users with a role of Contributor and above to perform Stored Cross-Site Scripting attacks against higher privileged users viewing the affected admin screens...
CVE-2026-65560: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Houzez Property Feed = 2.5.48 versions...
PT-2026-68504
Name of the Vulnerable Software and Affected Versions JetEngine versions prior to 3.8.13.2 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...
CVE-2026-28179: Improper Neutralization of Input During Web Page Generation
Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...
CVE-2026-18968: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit...