PT-2026-89409

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...

WordPress Media Library Assistant plugin <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by normaandersonfrank in WordPress Plugin Media LIbrary Assistant versions = 3.35...

WordPress Media Library Assistant plugin <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by gidget smith in WordPress Plugin Media LIbrary Assistant versions = 3.35...

CVE-2022-26962

Italtel NFV 11.1.2-20210318 contains a Multiple Stored XSS vulnerability in the NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp page (specifically via the operation=list&object=announcementAS query). The vulnerable parameters are name , username , and mrfAnnouncementName . A malicious authentic...

PT-2026-89263

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bg video service url' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2026-89378

WWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07ee78eaf330c1, contains a stored cross-site scripting vulnerability. objects/categoryAddNew.json.php passes the POST parameters name and iconClass to Category::setName and Category::setIconClass, which store the values...

PT-2026-89379

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LiveLinks plugin where title and description fields are stored without sanitization. A user with canStream permission can inject malicious scripts that execute in the browser...

CVE-2026-36392

FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting XSS. An authenticated administrator can inject arbitrary JavaScript into an item's title, which is stored server-side and executed in the browser of any client user who visits the store page, enabling session hijacking, accou...

EUVD-2022-56058

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...

CVE-2026-36392

FairSketch Rise CRM (RISE – Ultimate Project Manager & CRM) versions ≤ 3.9.6 are affected by a stored XSS in the item title field. An authenticated administrator can inject arbitrary JavaScript into an item's title; the payload is stored server-side and executes in the browser of any client user ...

PT-2026-89268

The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the control selectors meta field in all versions up to, and including, 2.0.4. This is due to the plugin registering the control selectors meta field with show in rest enabled but without a sanitize callbac...

PT-2026-89269

The Sidebar Manager Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sbm description' parameter in all versions up to, and including, 1.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

PT-2026-89410

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...

PT-2026-89377

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to encode the User-Agent header before storing it in login history. Attackers with any valid login account can inject malicious scripts in...

PT-2026-89380

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the AD Server plugin's log.php endpoint that fails to escape the label parameter before storage. An unauthenticated attacker can inject malicious HTML through the label parameter...

CVE-2026-29598

CVE-2026-29598: Cross-Site Scripting XSS Almacenado en cm3 Acora CMS versión 10.7.1. DDSN Interactive cm3 Acora CMS versión 10.7.1 contiene una vulnerabilidad de Cross-Site Scripting XSS Almacenado en la funcionalidad de gestión de usuarios. Un administrador con la capacidad de añadir o editar...

CVE-2024-42009

CVE-2024-42009 – XSS Almacenado en Roundcube PoC Docker 📌 Descripción General Este repositorio demuestra una Prueba de Concepto PoC funcional para CVE-2024-42009 , una vulnerabilidad de Cross-Site Scripting XSS almacenado en Roundcube Webmail. La vulnerabilidad es causada por una sanitización HTM...

CVE-2026-32722

CVE-2026-32722 Bloomberg Memray 通过未转义的命令行元数据实现存储型 XSS 简介 我在审查 Memray （Bloomberg 的 Python 内存分析器）时发现了这个问题，脑海中带着一个简单的问题： 攻击者控制的运行时元数据能否不安全地进入浏览器渲染的报告输出？ 在这个案例中，答案是肯定的。 该缺陷存在于 Memray 的 HTML 报告生成路径中，命令行元数据在未经转义的情况下被渲染到浏览器打开的报告里。这将一个操作字段变成了可执行的 HTML 汇点，最终成为 CVE-2026-32722 。 项目： GitHub 上的 Memray 公告：...

CVE-2025-55903

CVE-2025-55903: Inyección de HTML Almacenado en PerfexCRM ⚠️ Aviso de Seguridad Una vulnerabilidad crítica de Inyección de HTML Almacenado que afecta a facturas, facturación y comunicaciones automatizadas -ff6600 📋 Resumen Se ha descubierto una vulnerabilidad de Inyección de HTML Almacenado en...

CVE-2026-71802

A stored Cross-Site Scripting XSS vulnerability exists in the announcement preview component of REBUILD 4.4.3. Although the announcement content undergoes HTML escaping on the server side, the client-side preview code reverses the escaped entities using jQuery's html.text method and subsequently...