CVE-2026-47383: Improper Neutralization of Input During Web Page Generation

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, an authenticated commenter could store HTML in row comments that executed as script when other users hovered over the comment in the expanded form view. The comment write paths persisted the raw comment body with no...

EUVD-2023-35408

Malicious code in bioql PyPI...

CVE-2023-31079

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Roberts Tippy plugin = 6.2.1 versions...

CVE-2023-31079

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Roberts Tippy plugin = 6.2.1 versions...

CVE-2023-31079

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Roberts Tippy plugin = 6.2.1 versions...

CVE-2023-31079 WordPress Tippy Plugin <= 6.2.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Roberts Tippy plugin = 6.2.1 versions...

CVE-2023-31079

CVE-2023-31079 affects the WordPress Tippy plugin 6.2.1 and earlier (

CVE-2023-31079 WordPress Tippy Plugin <= 6.2.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Roberts Tippy plugin = 6.2.1 versions...

WordPress plugin Tippy 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Tippy Plugin <= 6.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Tippy Type Plugin Vulnerable versions = 6.2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-31079 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3bd9b4cefb69 Credits Mika Required privilege Contributor...