1163621 matches found
PT-2026-68504
Name of the Vulnerable Software and Affected Versions JetEngine versions prior to 3.8.13.2 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...
CVE-2026-28179: Improper Neutralization of Input During Web Page Generation
Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...
CVE-2026-18968: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit...
CVE-2026-28082: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.13.1 versions...
CVE-2026-66663: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
PT-2026-71534
Name of the Vulnerable Software and Affected Versions Stripe Payment Forms by WP Full Pay versions prior to 8.5.1 Description Stored Cross-Site Scripting XSS occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in...
PT-2026-71545
Name of the Vulnerable Software and Affected Versions Agrion versions prior to 1.0.1 Description Reflected Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute when a...
PT-2026-71536
Name of the Vulnerable Software and Affected Versions GeekyBot versions prior to 1.2.7 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute when a...
CVE-2026-28143: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Forminator = 1.56.0 versions...
CVE-2026-65513: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.12.10 versions...
CVE-2026-65565: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Survey Maker = 5.2.3.3 versions...
PT-2026-68624
Name of the Vulnerable Software and Affected Versions html sanitize ex versions 0.3.1 through 1.5.2 Description An Inclusion of Functionality from Untrusted Control Sphere issue exists in the HTML5 scrubber. A remote attacker can load an arbitrary document into a trusted page by utilizing the dat...
PT-2026-68882
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 7.0.3 Description WordPress contains a pre-authentication reflected cross-site scripting XSS issue on the login screen. The root cause is a discrepancy between two sanitizers regarding HTML tag identification, where...
CVE-2026-19110: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in DataGear up to 5.0.0. The impacted element is the function HtmlTplDashboardWidgetHtmlRenderer of the file HtmlTplDashboardWidgetHtmlRenderer.java of the component Chart Name Handler. This manipulation of the argument Title causes cross site scripting. It is...
CVE-2026-65509: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in wpDataTables = 7.5.1 versions...
CVE-2026-61963: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...
CVE-2026-66707: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
CVE-2026-66664: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...