CVE-2026-39541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: step-kms-plugin, gatekeeper, kube-arangodb, vitess, kubescape-operator, pulumi-language-yaml, kuma, neuvector-sigstore-interface, gitlab-runner, fluent-operator, cosign, kube-rbac-proxy, caddy, guac, gitlab-kas, crossplane-provider-aws-elasticache, prometheus, ranche...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: chronograf-fips, jitsucom-bulker, k8s-image-swapper-fips, crossplane-function-patch-and-transform, cilium-fips, minio-fips, kapp, gomplate-fips, kuma, peerdb-flow, terragrunt-fips, kubernetes-csi-external-resizer, crossplane-provider-aws-backup,...

pentestfr

Pentest Framework — Kali Linux / VirtualBox Framework Python...

EUVD-2026-20195

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

CVE-2026-39541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

CVE-2026-39541 WordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

CVE-2026-39541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

CVE-2026-39541

CVE-2026-39541 affects the WordPress Hydra Booking plugin by Themefic, affected versions: Hydra Booking

CVE-2026-39541 WordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

PT-2026-31148

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

WordPress plugin Hydra Booking 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

SUSE CVE-2019-8400

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error errorhint parameter...

CVE-2026-33504 vulnerabilities

Vulnerabilities for packages: hydra-fips, hydra...

GHSA-R9W3-57W2-GCH2 vulnerabilities

Vulnerabilities for packages: hydra-fips, hydra...

SUSE CVE-2026-33504

Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider. Prior to version 26.2.0, the listOAuth2Clients, listOAuth2ConsentSessions, and listTrustedOAuth2JwtGrantIssuers Admin APIs in Ory Hydra are vulnerable to SQL injection due to flaws in its pagination implementation. Pagination tokens ar...

CVE-2026-33504

Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider. Prior to version 26.2.0, the listOAuth2Clients, listOAuth2ConsentSessions, and listTrustedOAuth2JwtGrantIssuers Admin APIs in Ory Hydra are vulnerable to SQL injection due to flaws in its pagination implementation. Pagination tokens ar...

CVE-2026-33504 vulnerabilities

Vulnerabilities for packages: hydra...

GHSA-R9W3-57W2-GCH2 vulnerabilities

Vulnerabilities for packages: hydra...

Cross-site Scripting (XSS)

Overview github.com/ory/hydra/oauth2 is an OAuth2 Server and OpenID Certified™ OpenID Connect Provider written in Go. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the errorhint parameter. An attacker can execute arbitrary JavaScript in the context of the user's...