CVE-2026-66579

Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...

CVE-2026-66574

Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...

CVE-2026-78294 WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

PT-2026-94263

Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...

CVE-2026-90887: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Inventory Manager = 2.5.4 versions...

CVE-2026-90986: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.21 versions...

CVE-2026-66573: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in JetTabs = 2.3.3.1 versions...

CVE-2025-15697: Improper Neutralization of Input During Web Page Generation

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request...

CVE-2026-66579: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...

CVE-2026-66617: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in PublishPress Series = 3.1.3 versions...

CVE-2026-66576: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...

CVE-2026-78294: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

CVE-2026-66577: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...

CVE-2026-66572: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in JetBlog = 2.4.10 versions...

CVE-2026-66578: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in PropertyHive = 2.2.6 versions...

CVE-2026-92973: Improper Neutralization of Input During Web Page Generation

ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...

PT-2026-94343

Name of the Vulnerable Software and Affected Versions Vendure versions prior to 3.6.5 Description Stored cross-site scripting XSS exists in the admin dashboard due to unsafe HTML stripping in the RichTextDescriptionCell component within...

EUVD-2026-44650

Grav: XSS Blueprint Validation Bypass via Twig String Concatenation...

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update

Red Hat Edge Manager Version 1.1.4 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the REST API when submitting a job configuration, due to improper validation of the coverage results ID. An attacker can execute arbitrary JavaScript in the context of other users by providing a specially...