1148946 matches found
CVE-2026-74902: Improper Neutralization of Input During Web Page Generation
SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fails to escape filenames before inserting them into HTML via insertAdjacentHTML. Attackers can craft a malicious filename containing script payloads that execute with full OS command access...
CVE-2026-75626: Improper Neutralization of Input During Web Page Generation
SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject malicious HTML elements with event handlers into correlation results that execute scripts in the operator's browser when the correlations view is...
CVE-2026-68567: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...
CVE-2026-66645: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...
CVE-2026-66629: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...
CVE-2026-66621: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Dashboard Ultimate Dashboard Pro ultimate-dashboard-pro allows DOM-Based XSS.This issue affects Ultimate Dashboard Pro: from n/a through 3.11.2...
CVE-2026-73426: Improper Neutralization of Input During Web Page Generation
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...
CVE-2026-73393: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...
CVE-2026-73358: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...
CVE-2025-9211: Improper Neutralization of Input During Web Page Generation
Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting...
CVE-2026-54570: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
AngleSharp is a .NET library for parsing angle bracket based hyper-texts. Prior to 1.5.0, MathAnnotationXmlElement in AngleSharp/Mathml/Dom/Internal/MathAnnotationXmlElement.cs is not treated as an HTML integration point when its encoding attribute is text/html or application/xhtml+xml, causing...
CVE-2026-73375: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...
CVE-2026-73361: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Recipe Card Blocks for Gutenberg & Elementor = 3.4.18 versions...
CVE-2026-73360: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
CVE-2026-30250: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...
CVE-2026-66667: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...
CVE-2026-66643: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
CVE-2026-66641: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...