1148598 matches found
CVE-2026-19995: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account/rma/send-message of the component RMA Message Handler. This manipulation of the argument Message causes cross site scripting. Remote exploitation of the attack is possible. The...
CVE-2026-67925
Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload...
CVE-2026-42164
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...
CVE-2026-50771
A Cross Site Scripting (XSS) vulnerability exists in Squirro Cognitive Search versions prior to 3.14.2 . This flaw allows a remote attacker to execute arbitrary code by interacting with the Email Notification , Create Evaluation Sets , and HTML Editor functions. While the description identifies t...
PT-2026-76764
Name of the Vulnerable Software and Affected Versions Legora versions prior to 2026-08-14 Description A cross-site scripting issue exists where attackers can execute arbitrary JavaScript in a victim's browser. This occurs when a Mermaid block is prefixed with a gray-matter JavaScript front-matter...
CVE-2026-74234: Undefined Security Weakness
Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter parser to invoke eval...
CVE-2026-50771
Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...
CVE-2026-67925: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload...
PT-2026-73216
A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account/rma/send-message of the component RMA Message Handler. This manipulation of the argument Message causes cross site scripting. Remote exploitation of the attack is possible. The...
CVE-2026-19998: Improper Neutralization of Input During Web Page Generation
A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...
CVE-2026-67925
A Cross Site Scripting (XSS) vulnerability exists in JeecgBoot v.3.9.2 . A remote attacker can exploit this flaw via the /airag/chat/upload endpoint to execute arbitrary code. While the impact is described as code execution, the vulnerability is categorized as XSS. Specific information regarding ...
CVE-2026-50771: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...
PT-2026-73219
Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description A remote cross site scripting issue exists in the offersmail.php file. This occurs when the email argument is manipulated, allowing an attacker to execute malicious scripts in the...
PT-2026-73299
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...
EUVD-2026-60355
Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...
PT-2026-76743
Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...
PT-2026-76881
Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A security flaw allows remote exploitation via cross site scripting XSS, a technique where malicious scripts are injected into trusted websites. The issue exists in the...
PT-2026-73206
A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. Performing a manipulation results in basic cross site scripting. The attack can be initiated remotely. The exploit is now public...
PT-2026-76791
Name of the Vulnerable Software and Affected Versions JeecgBoot version 3.9.2 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code through the '/airag/chat/upload' endpoint. Recommendations At the moment, there is no information about a newer version tha...