CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References:...

CVE-2026-115950

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-widgets-for-elementor allows Stored XSS.This issue affects Better Post & Filter Widgets for Elementor: from n/a throug...

EUVD-2026-109731

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Slider b-slider allows Stored XSS.This issue affects B Slider: from n/a through 2.2.2...

FortiWeb - Cross Site Scripting

FortiWeb 6.3.0 through 6.3.7 and versions before 6.2.4 contain an unauthenticated cross-site scripting vulnerability. Improper neutralization of input during web page generation can allow a remote attacker to inject malicious payload in vulnerable API end-points. id: CVE-2021-22122 info: name:...

CVE-2026-112863

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hogash KALLYAS kallyas allows Reflected XSS.This issue affects KALLYAS: from n/a through 4.25.0...

CVE-2026-96379

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3...

CVE-2026-96368

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

CVE-2026-96357

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

CVE-2026-87942

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions: from 0.0.0 to 1.0.88...

CVE-2026-87939

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: from 0.0.0 to 2.0.2, from 3.0.0 to 3.0.2...

EUVD-2026-107862

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: from 0.0.0 to 2.0.2, from 3.0.0 to 3.0.2...

CVE-2026-87939 Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: from 0.0.0 to 2.0.2, from 3.0.0 to 3.0.2...

EUVD-2026-107859

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions: from 0.0.0 to 1.0.88...

EUVD-2026-107820

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3...

CVE-2026-96379

The Drupal CookieCuttr module versions 2.0.0 through 2.0.3 are vulnerable to a Stored Cross-site Scripting (XSS) issue. The root cause is the insufficient filtering of input submitted via the Cookiecuttr administration form , which allows specially crafted values to be stored and subsequently ren...

CVE-2026-96379 CookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3...

CVE-2026-96382

The Drupal Diba carousel slider (versions 0.0.0 through 3.0.2 ) is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is that when the "Allow HTML description" option is enabled, the component renders slide descriptions using raw stored field values. This bypasses Drupal's standard ...

PT-2026-120695

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder affected versions not specified Cisco Prime Collaboration Deployment affected versions not specified Cisco Unified Communications Manager Unified CM affected versions not specified Cisco Unified Communications Manager...

CVE-2026-18205

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...

EUVD-2026-104962

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...