Lucene search
+L

8 matches found

NVD
NVD
•added 2026/09/14 4:17 p.m.•11 views

CVE-2026-90943

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

9.3CVSS0.0043EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/14 3:37 p.m.•19 views

CVE-2026-90943

parallax/filament-comments (through 3.0.0 ) contains a stored cross-site scripting vulnerability in comment body rendering. The root cause is unescaped output in the comment display views (comments.blade.php) and policy layer, allowing authenticated panel users to inject malicious scripts into co...

9.3CVSS5.8AI score0.0043EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/14 3:37 p.m.•12 views

EUVD-2026-77580

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

9.3CVSS5.7AI score0.0043EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/14 3:37 p.m.•14 views

CVE-2026-90943 parallax filament-comments through 3.0.0 Stored XSS via Comment Body

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

9.3CVSS5.7AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/09/14 3:37 p.m.•21 views

CVE-2026-90943 parallax filament-comments through 3.0.0 Stored XSS via Comment Body

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

9.3CVSS5.8AI score0.0043EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/14 3:37 p.m.•40 views

CVE-2026-90943 parallax filament-comments through 3.0.0 Stored XSS via Comment Body

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

9.3CVSS0.0043EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•2 views

CVE-2026-90943: Improper Neutralization of Input During Web Page Generation

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

9.3CVSS5.8AI score0.0043EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•15 views

PT-2026-91258

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

9.3CVSS5.7AI score0.0043EPSS
SaveExploits0References6
Rows per page
Query Builder