1045701 matches found
CVE-2026-28182
Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...
CVE-2026-28175
Unauthenticated Cross Site Scripting XSS in Visitors Traffic Real Time Statistics = 8.11 versions...
CVE-2026-28158
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
CVE-2026-28003
Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...
CVE-2026-28004
Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...
CVE-2026-27536
Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...
CVE-2026-19716
Stored Cross-site Scripting CWE-79 in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the browser of another authenticated user via a crafted username, because the frontend escapes the username with escapeHTML...
NPM: ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header
NPM: epetherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 2.1.0, = 3.0.0...
EUVD-2026-57914
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
CVE-2026-73357 WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
EUVD-2026-57910
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-73344
The CVE-2026-73344 entry concerns the WordPress WP Data Access plugin, affected versions
CVE-2026-73344 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-73340 WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...
CVE-2026-73340
The CVE covers a Cross Site Scripting (XSS) vulnerability in the WordPress plugin Featured Image from URL , affecting versions
CVE-2026-66700
Unauthenticated Cross Site Scripting XSS in Smart Online Order for Clover = 1.6.1 versions...
CVE-2026-66700 WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Smart Online Order for Clover = 1.6.1 versions...
CVE-2026-66700
CVE-2026-66700 affects the WordPress plugin “Smart Online Order for Clover” (versions <= 1.6.1). The vulnerability is an Unauthenticated Cross Site Scripting (XSS) flaw reported for that plugin, indicating an attacker can inject scripts without authentication. Connected records confirm the aff...