CVE-2026-126424

OpenEMR versions before 8.5.0 are vulnerable to a stored cross-site scripting (XSS) flaw. The vulnerability exists because users with admin or superbill write permissions can inject malicious HTML into SNOMED code descriptions through the superbill_custom_full.php component. When a clinician sele...

EUVD-2026-125019

OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows users with admin/superbill write permission to inject HTML into SNOMED code descriptions via superbillcustomfull.php. When a clinician selects the malicious code, the Functional and Cognitive Status form or...

CVE-2026-59078

Edito CMS is vulnerable to Stored XSS in avatar upload functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting an URL leading to a edited avatar. This issue was fixed in version 5.10.2607. Hotfixes for older versions...

EUVD-2026-124879

Edito CMS is vulnerable to Stored XSS via content parameter in Tiny editor functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when user tries to edit changed entry. This issue was fixed in version 5.10.2607. Hotfixes for older...

Swagger-HTML-Injection-CVE-2025-8191

https://example.com/swagger/swagger.html?configURL=https://raw.githubusercontent.com/mayank-s16/Swagger-HTML-Injection-CVE-2025-8191/refs/heads/main/test.json...

CVE-2025-55903

CVE-2025-55903: Stored HTML Injection in PerfexCRM ⚠️ Security Advisory A critical Stored HTML Injection vulnerability affecting invoices, billing, and automated communications -ff6600 📋 Overview A Stored HTML Injection vulnerability has been discovered in PerfexCRM that allows authenticated users...

osTicket < 1.10.2 - Cross-Site Scripting

Cross-site scripting XSS vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter. id: CVE-2018-7196 info: name: osTicket 1.10.2 - Cross-Site Scripting author: ritikchaddha severity: medium...

WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

WordPress Ultimate FAQs <= 1.8.24 – Unauthenticated HTML Content Injection

Functions/EWDUFAQImport.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection. id: CVE-2019-17233 info: name: WordPress Ultimate FAQs = 1.8.24 – Unauthenticated HTML Content Injection author: daffainfo severity: medium description: | Functions/EWDUFAQImport.ph...

CVE-2026-126363

Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. A request-controlled slot name containing a quote could terminate the attribute and...

CVE-2026-126362

Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...

CVE-2026-126363: withastro astro: Astro is a web framework for content-driven websites

Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. A request-controlled slot name containing a quote could terminate the attribute and...

CVE-2026-126361: withastro astro: Astro is a web framework for content-driven websites

Astro is a web framework for content-driven websites. Prior to 7.4.5, Astro rendered a string used as a dynamic element name as raw HTML after applying an incomplete character filter. A / in the string could make an HTML parser treat the remainder as attributes, allowing untrusted element-name...

CVE-2026-126362: withastro astro: Astro is a web framework for content-driven websites

Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...

GHSA-3GG2-335M-RXC6 Hono: `css` helper does not escape a closing tag split between the template and an interpolated value, allowing HTML injection

Summary The css helper in hono/css escapes a / that follows element. The check only looks inside each value. When the text before a value ends with when that string starts with /style. During server-side rendering the element is closed early and the rest of the value is interpreted as HTML. This...

Hono: `css` helper does not escape a closing tag split between the template and an interpolated value, allowing HTML injection

Summary The css helper in hono/css escapes a / that follows element. The check only looks inside each value. When the text before a value ends with when that string starts with /style. During server-side rendering the element is closed early and the rest of the value is interpreted as HTML. This...

npm: Hono: `css` helper does not escape a closing tag split between the template and an interpolated value, allowing HTML injection

npm: Hono: css helper does not escape a closing tag split between the template and an interpolated value, allowing HTML injection vulnerability discovered by ? in WordPress npm hono versions = 3.12.0, = 4.13.15...

viber-desktop-html-injection

Viber Desktop — HTML Injection CVE-2025-55996 CVE: CVE-2025-55996 Discoverer: Thaw Khant Cycbake Product: Viber Desktop Affected: Viber Desktop 25.6.0 and possibly earlier Summary Viber Desktop's deep-link handler viber://forward?text= can render unsanitized HTML supplied in the text parameter...

CVE-2026-126363

Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. A request-controlled slot name containing a quote could terminate the attribute and...

CVE-2026-126362

Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...