Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 3:11 p.m.•16 views

CVE-2026-32774

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers...

6.4CVSS5.9AI score0.00368EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/03/16 3:30 p.m.•22 views

Vulnogram contains a stored cross-site scripting vulnerability in comment hypertext handling

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers...

6.4CVSS6.3AI score0.00368EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2026/03/16 2:19 p.m.•11 views

CVE-2026-32774

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers...

6.4CVSS0.00368EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/16 12:00 a.m.•18 views

Vulnogram 跨站脚本漏洞

Vulnogram is an open-source CVE vulnerability management and publishing tool developed by Vulnogram. Version 1.0.0 of Vulnogram contains a cross-site scripting vulnerability. This vulnerability stems from stored-xss annotations in HTML comments, which may allow remote attackers to inject XSS...

6.4CVSS5.9AI score0.00368EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/14 9:44 p.m.•59 views

CVE-2026-32774

CVE-2026-32774 affects Vulnogram 1.0.0 and describes a stored XSS vulnerability in comment hypertext handling. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims’ browsers. The root cause is stored cross-site scripting in HTML comments; exploitati...

6.4CVSS6.3AI score0.00368EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/14 9:44 p.m.•4 views

CVE-2026-32774 Vulnogram - Stored Cross-Site Scripting via Comment Hypertext

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers...

6.4CVSS6.3AI score0.00368EPSS
SaveExploits0References3
OSV
OSV
•added 2026/03/14 9:44 p.m.•16 views

CVE-2026-32774 Vulnogram - Stored Cross-Site Scripting via Comment Hypertext

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers...

5.3CVSS6.1AI score
SaveExploits0References6
attackerkb
attackerkb
•added 2026/03/14 9:44 p.m.•3 views

CVE-2026-32774

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers...

6.4CVSS5.9AI score0.00368EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/03/14 9:44 p.m.•44 views

CVE-2026-32774 Vulnogram - Stored Cross-Site Scripting via Comment Hypertext

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers...

6.4CVSS0.00368EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/14 12:00 a.m.•2 views

CVE-2026-32774: Improper Neutralization of Input During Web Page Generation

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers...

6.4CVSS6.1AI score0.00368EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/14 12:00 a.m.•23 views

PT-2026-25509

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers...

6.4CVSS5.9AI score0.00368EPSS
SaveExploits0References6
Rows per page
Query Builder