1125056 matches found
CVE-2026-71446 Stored Cross-Site Scripting in AIL Framework Domain Screenshot View
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...
CVE-2026-71446 Stored Cross-Site Scripting in AIL Framework Domain Screenshot View
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...
CVE-2026-71445 Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/addtags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using strres0. If attacker-controlled input was included in the...
CVE-2026-71445
The CVE-2026-71445 entry concerns AIL Framework. It describes an authenticated reflected cross-site scripting flaw in the /tag/add_tags endpoint, where an error message is emitted directly as HTML via str(res[0]), allowing attacker-controlled input to be reflected without proper encoding. Exploit...
CVE-2026-71445 Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/addtags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using strres0. If attacker-controlled input was included in the...
CVE-2026-66843
Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows a remote attacker to load a document of their choosing into a trusted page via the data attribute of an element in sanitized HTML. object is the one URI-bearing element in...
CVE-2026-66711
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
CVE-2026-66703
Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...
CVE-2026-66702
Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...
CVE-2026-66705
Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...
CVE-2026-66706
Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...
CVE-2026-66707
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
CVE-2026-66690
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.5 versions...
CVE-2026-66694
Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...
CVE-2026-66688
Contributor Cross Site Scripting XSS in Ultimate Addons for Elementor = 1.45.2 versions...
CVE-2026-66664
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...
CVE-2026-66440
Unauthenticated Cross Site Scripting XSS in WPIDE – File Manager & Code Editor = 3.5.7 versions...
CVE-2026-66457
Unauthenticated Cross Site Scripting XSS in Events Manager = 7.4.1 versions...