CVE-2026-25353

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Nooni nooni allows Reflected XSS.This issue affects Nooni: from n/a through 1.5.1...

CVE-2026-24983

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through = 8.41...

CVE-2025-69096

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Zorka zorka allows Reflected XSS.This issue affects Zorka: from n/a through = 1.5.7...

CVE-2026-32544 WordPress OOPSpam Anti-Spam plugin <= 1.2.62 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spam allows Stored XSS.This issue affects OOPSpam Anti-Spam: from n/a through = 1.2.62...

CVE-2026-32529

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in don-themes Molla molla allows Reflected XSS.This issue affects Molla: from n/a through 1.5.19...

CVE-2026-32517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

CVE-2026-27088

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Darna Framework darna-framework allows Reflected XSS.This issue affects Darna Framework: from n/a through = 2.9...

CVE-2026-23807 WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2025-40842

CVE-2025-40842 concerns Ericsson Indoor Connect 8855. The vulnerability is an Improper Neutralization of Input During Web Page Generation (XSS) in versions prior to 2025.Q3, potentially allowing unauthorized disclosure and modification of information. The CVSS v4.0 score is 8.5 (HIGH), with netwo...

CVE-2025-40842 Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting XSS vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information...

PT-2026-27916

Name of the Vulnerable Software and Affected Versions skygroup Sanzo versions prior to 2.4.3 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential cross-site scripting XSS issue. Specifically, the vulnerability allo...

PT-2026-28058

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Taboola Taboola Pixel taboola-pixel allows Reflected XSS.This issue affects Taboola Pixel: from n/a through = 1.1.4...

PT-2026-27845

Name of the Vulnerable Software and Affected Versions uxper Golo versions prior to 1.7.5 Description An issue exists in uxper Golo that allows for Reflected Cross-site Scripting XSS. This occurs due to improper neutralization of input during web page generation. The issue affects the application’...

PT-2026-27914

Name of the Vulnerable Software and Affected Versions skygroup Nooni versions prior to 1.5.1 Description The software contains a flaw related to improper input handling during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inject malicio...

PT-2026-28057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spam allows Stored XSS.This issue affects OOPSpam Anti-Spam: from n/a through = 1.2.62...

PT-2026-28031

Name of the Vulnerable Software and Affected Versions Kleor Contact Manager versions through 9.1 Description A Reflected Cross-site Scripting XSS issue exists in Kleor Contact Manager. The issue is due to improper neutralization of input during web page generation. This allows an attacker to inje...

PT-2026-27917

Name of the Vulnerable Software and Affected Versions skygroup Yobazar versions prior to 1.6.7 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This allows an attacker to inject...

PT-2026-27886

Name of the Vulnerable Software and Affected Versions VikRestaurants versions through 1.5.2 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inject...

PT-2026-27847

Name of the Vulnerable Software and Affected Versions Softwebmedia Gyan Elements versions n/a through 2.2.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, potentially leading to reflected cross-site scripting XSS. This allows an...

PT-2026-27853

Name of the Vulnerable Software and Affected Versions The Grid versions prior to 2.8.0 Description An issue exists in The Grid that allows for Stored Cross-Site Scripting XSS. This occurs due to improper neutralization of input during web page generation. The vulnerability allows an attacker to...