1148986 matches found
PT-2026-85122
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
Shifting from Injection to Interaction: Rethinking Web Security in the Age of LLMs and Beyond
Large language models LLMs are becoming integral to web applications and browser agents, transforming online interactions while introducing new attack vectors and reshaping longstanding web vulnerabilities. Classical threats such as cross-site scripting XSS can be amplified through LLM-mediated...
PT-2026-85220
A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched remotely. The exploit is publicly availab...
PT-2026-85089
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
PT-2026-85087
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
PT-2026-85111
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
PT-2026-85245
Name of the Vulnerable Software and Affected Versions MapLibre GL JS versions prior to 6.4.1 Description The DOM.sanitize function in src/util/dom.ts incorrectly iterates through elem.attributes as a live NamedNodeMap. Because removeAttributes modifies the same collection during iteration, indexe...
CVE-2026-85021: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirecturl causes cross site scripting. The attack is possible to be carried o...
CVE-2026-81776: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-81773: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Ninja Forms File Uploads Extension = 3.3.26 versions...
CVE-2026-81295: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
CVE-2026-81292: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
CVE-2026-81281: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
CVE-2026-85207: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched remotely. The exploit is publicly availab...
CVE-2026-84773: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
CVE-2026-84763: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
CVE-2026-2573: Improper Neutralization of Input During Web Page Generation
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This mak...
CVE-2026-85022: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...