1148651 matches found
CVE-2025-15591
Cross-site Scripting XSS in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page...
EUVD-2026-93413
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...
CVE-2024-4367-PDF.js-xss
CVE-2024-4367–PDF.js-xss CVE-2024-4367–PDF.js-xss Download the environment, unzip it, and enter unzip cve-2024-4367-lab cd cve-2024-4367-lab Environment startup command mkdir upload chmod 777 upload docker-compose up -d...
WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by William Honnér in WordPress Plugin Social Share Icons & Social Share Buttons versions = 3.7.5...
Security Bulletin: Due to use of Nodejs Express.js, multiple vulnerabilities affect IBM Cloud Pak System[CVE-2024-43796, CVE-2024-43799, CVE-2024-43800]
Summary Multiple vulnerabilities in Send cross-site scripting XSS within the SendStream.redirect, serve-static built-in and response.redirect found in Node.js Express.js which is used by IBM Cloud Pak System. Vulnerabilities were addressed by IBM Cloud Pak System. Vulnerability Details...
CVE-2026-40806
Unauthenticated Cross Site Scripting XSS in Blog, Posts and Category Filter for Elementor = 2.1.0 versions...
CVE-2026-50229
⚡ CVE-2026-50229 — Apache Tomcat Examples XSS Exploit 🔴 Advanced Cross-Site Scripting XSS Scanner & Exploit for Apache Tomcat Examples Web Application 📌 Overview CVE-2026-50229 is a Cross-Site Scripting XSS vulnerability discovered in the bundled examples web application shipped with Apache Tomca...
CVE-2026-104814
The Form Block WordPress plugin in versions
CVE-2026-104395 WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...
CVE-2026-104394 WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Charitable = 1.8.12.3 versions...
CVE-2026-42636
The WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin for WordPress, versions
CVE-2026-42636 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.4.6 versions...
CVE-2026-42635 WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...
CVE-2026-42634 WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Video Background Block – Use video as background in the section. = 2.0.3 versions...
CVE-2026-42634
The Video Background Block – Use video as background in the section. WordPress plugin, versions
CVE-2026-40807 WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...
CVE-2026-39784 WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Hotel Booking = 3.8 versions...
CVE-2026-39780 WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Youzify = 1.3.7 versions...