Lucene search
+L

168 matches found

Mend
Mend
•added 2026/11/11 10:48 p.m.•2 views

CVE-2026-126727

The Texts module provides key-based strings and translations for Drupal, including Twig filters for displaying translated text. The module does not sufficiently validate translation HTML and can display stored translations without sufficient filtering. A user who can create or edit string...

5.4CVSS5.7AI score
SaveExploits0References1
Mend
Mend
•added 2026/11/11 10:48 p.m.•4 views

CVE-2026-126728

The Texts module provides key-based strings and translations for Drupal and tools for managing them. The module does not sufficiently protect an action to restore a duplicate translation. A crafted request can cause a user with access to the translation overview to overwrite an existing translati...

5.1CVSS6AI score
SaveExploits0References1
osv_drupal
osv_drupal
•added 2026/11/11 5:42 p.m.•7 views

DRUPAL-CONTRIB-2026-319

The Texts module provides key-based strings and translations for Drupal and tools for managing them. The module does not sufficiently protect an action to restore a duplicate translation. A crafted request can cause a user with access to the translation overview to overwrite an existing translati...

6AI score
SaveExploits0References1
osv_drupal
osv_drupal
•added 2026/11/11 5:41 p.m.•7 views

DRUPAL-CONTRIB-2026-318

The Texts module provides key-based strings and translations for Drupal, including Twig filters for displaying translated text. The module does not sufficiently validate translation HTML and can display stored translations without sufficient filtering. A user who can create or edit string...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/11/11 12:00 a.m.•1 views

PT-2026-145643

The Texts module provides key-based strings and translations for Drupal, including Twig filters for displaying translated text. The module does not sufficiently validate translation HTML and can display stored translations without sufficient filtering. A user who can create or edit string...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/11 12:00 a.m.•2 views

PT-2026-145644

The Texts module provides key-based strings and translations for Drupal and tools for managing them. The module does not sufficiently protect an action to restore a duplicate translation. A crafted request can cause a user with access to the translation overview to overwrite an existing translati...

6AI score
SaveExploits0References2
NVD
NVD
•added 2026/10/26 6:17 p.m.•16 views

CVE-2026-115966

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0...

6.5CVSS0.0017EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/26 5:27 p.m.•22 views

CVE-2026-115966

The Typing Text – Give your texts many typing effects WordPress plugin (versions n/a through 2.2.0 ) is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. This issue stems from Improper Neutralization of Input During Web Page Generation , allowing an attacker to inject malicious sc...

6.5CVSS5.9AI score0.0017EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/26 5:27 p.m.•18 views

CVE-2026-115966 WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0...

6.5CVSS5.9AI score0.0017EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/26 5:27 p.m.•25 views

CVE-2026-115966 WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0...

6.5CVSS0.0017EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/26 5:27 p.m.•15 views

EUVD-2026-110044

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0...

6.5CVSS5.9AI score0.0017EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/26 5:27 p.m.•15 views

WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Typing Text – Give your texts many typing effects versions = 2.2.0...

6.5CVSS5.8AI score0.0017EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•18 views

PT-2026-125034

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0...

6.5CVSS5.9AI score0.0017EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/10/21 4:00 p.m.•10 views

Vulnerability related to Amazon Athena permission, authorization, and access control issues

A security vulnerability exists in Amazon Athena Engine version 3. This vulnerability stems from improper authorization checks during query processing, potentially allowing authenticated users to read metadata related to AWS account identifiers and SQL statement texts from other AWS accounts...

7.7CVSS6AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/01 9:17 a.m.•16 views

CVE-2026-100179

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'x any URL parameter consumed by the form's calculated equation' parameter in all versions up to, and including,...

6.1CVSS0.00211EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/29 1:17 p.m.•24 views

CVE-2026-101270

Malicious HTML content could be injected into the help texts of various fields with organizer permissions...

2.1CVSS0.00185EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/29 12:02 p.m.•20 views

EUVD-2026-88752

Malicious HTML content could be injected into the help texts of various fields with organizer permissions...

2.1CVSS5.8AI score0.00185EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 12:02 p.m.•31 views

CVE-2026-101270

The software is vulnerable to HTML injection , where malicious HTML content can be injected into the help texts of various fields. This vulnerability is accessible to users with organizer permissions . No specific affected product versions or remediation steps are provided in the documents.

2.1CVSS5.8AI score0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 12:02 p.m.•45 views

CVE-2026-101270 HTML injection

Malicious HTML content could be injected into the help texts of various fields with organizer permissions...

2.1CVSS0.00185EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/29 12:02 p.m.•11 views

CVE-2026-101270

Malicious HTML content could be injected into the help texts of various fields with organizer permissions...

4.4CVSS5.8AI score0.00185EPSS
SaveExploits0References5
Rows per page
Query Builder