1148754 matches found
CVE-2022-30983
A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...
PT-2026-81056
Name of the Vulnerable Software and Affected Versions Event Tickets versions 5.29.2.1 and earlier Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Event Tickets to...
PT-2026-80817
Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...
CVE-2026-78187: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...
CVE-2026-78264: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...
PT-2026-81062
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
PT-2026-80833
Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...
PT-2026-80826
Unauthenticated Cross Site Scripting XSS in Events Made Easy = 3.2.5 versions...
PT-2026-80807
Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...
PT-2026-80806
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...
CVE-2026-78263: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-32556: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...
PT-2026-80840
Unauthenticated Cross Site Scripting XSS in Urna = 2.6.2 versions...
Johnson Controls Metasys 12.x / 13.x / 14.x < 14.1.5 / 15.x < 15.0.1 Cross-Site Scripting (CVE-2026-34491)
A low-privilege user can inject a malicious XSS payload into the Johnson Controls Metasys UI via a crafted URL. The payload persists across logins and executes in the browser context of other users, including administrators. Successful exploitation of this vulnerability could allow a low-privileg...
PT-2026-80805
Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...
PT-2026-80980
Name of the Vulnerable Software and Affected Versions Metasys versions prior to 14.1.5 Metasys versions prior to 15.0.1 Description Improper neutralization of input during web page generation allows Cross Site Scripting XSS, a condition where malicious scripts are injected into trusted websites...
EUVD-2022-56022
A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...
PT-2026-81048
Name of the Vulnerable Software and Affected Versions Boost versions prior to 2.0.5 Description An unauthenticated Cross-Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the context of a user's session without requiring prior authentication. Recommendation...