RHEL 9 : image-builder (RHSA-2026:67138)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67138 advisory. A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes:...

The vulnerability of SAP Business One’s resource management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of SAP Business One’s resource management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

PT-2026-91064

Name of the Vulnerable Software and Affected Versions MassMessage extension in MediaWiki versions prior to 1.40.2 Description A Cross-Site Scripting XSS issue exists in the MassMessage extension. The problem occurs when using the Special:MassMessage endpoint with the uselang parameter set to a...

PT-2026-91025

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A remote cross-site scripting issue exists in the /subject1.php file. This occurs when the subject argument is manipulated, allowing an attacker to execute scripts in the...

iLEAPP 2026.4.0 Cross Site Scripting

iLEAPP version 2026.4.0 is vulnerable to persistent cross site scripting in the generated SMS/iMessage chat HTML report. https://packetstorm.news/download/231359...

CVE-2026-90795: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in itsourcecode Loan Management System 1.0. The impacted element is an unknown function of the file navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicl...

CVE-2024-23176

An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS...

CVE-2024-23176

CVE-2024-23176 is a cross-site scripting (XSS) vulnerability in the MassMessage extension of MediaWiki versions before 1.40.2 . The root cause is that the i18n key massmessage-form-page-help fails to sanitize user-supplied input passed via the uselang parameter in a Special:MassMessage URL (e.g.,...

CVE-2023-51769

Frappe before 14.49.0 is vulnerable to a Cross-Site Scripting (XSS) attack that affects blog pages and exception pages . The CVSS 3.1 score is 6.1 (MEDIUM) , with a network attack vector, low complexity, no privileges required, but user interaction required , and a changed scope leading to low im...

PT-2026-91117

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products handler.php of the component Product Management Module. Executing a manipulation of the argument Product Name can lead to cross site...

PT-2026-91096

Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

PT-2026-91085

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

PT-2026-91067

Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

PT-2026-91257

Name of the Vulnerable Software and Affected Versions itsourcecode Loan Management System version 1.0 Description A cross site scripting issue exists in the navbar.php file. A remote attacker can execute the attack by manipulating the page argument, which allows the injection of malicious scripts...

PT-2026-91113

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendors handler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

CVE-2023-28148

Paessler PRTG Network Monitoring is affected by a bodyclass Cross-Site Scripting (XSS) vulnerability in versions prior to 23.3.86.1520 . The vulnerability allows an attacker to inject scripts via the body class parameter, with a CVSS 3.1 score of 7.2 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N), ...

CVE-2026-90694: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

PT-2026-91763

Name of the Vulnerable Software and Affected Versions michaelliao itranswarp versions prior to 2.20 Description A flaw in the Page Content Rendering component allows remote attackers to perform cross site scripting XSS, which is a technique used to inject malicious scripts into web pages viewed b...

CVE-2026-82781: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

PT-2026-91094

Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...