1330 matches found
CVE-2026-65444
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60...
CVE-2026-65444 WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60...
CVE-2026-107306
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0...
EUVD-2026-113566
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0...
EUVD-2026-113543
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Sector Distribution allows Stored XSS. This issue affects Sector Distribution versions: from 0.0.0 to 10.3.3, from 10.4.0 to 10.4.2...
EUVD-2026-113538
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal USWDS Paragraph Components allows Stored XSS. This issue affects USWDS Paragraph Components versions: from 0.0.0 to 3.1.3...
CVE-2026-118097 WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Flash & HTML5 Video html5-video-player allows Stored XSS.This issue affects Flash & HTML5 Video: from n/a through 2.14.0...
CVE-2026-118097
The bPlugins Flash & HTML5 Video WordPress plugin (specifically the html5-video-player component) is vulnerable to Stored Cross-Site Scripting (XSS) . This flaw is caused by improper neutralization of input during web page generation. The vulnerability affects versions up to and including 2.14.0 ...
CVE-2026-114706 WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.15...
CVE-2026-114706
The WP Chill Strong Testimonials WordPress plugin (versions 3.3.15 and below ) is vulnerable to Stored Cross-Site Scripting (XSS) . This vulnerability arises from the improper neutralization of input during web page generation , which could allow an attacker to execute malicious scripts in the co...
CVE-2026-118095 WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows DOM-Based XSS.This issue affects Media LIbrary Assistant: from n/a through 3.42...
CVE-2026-118095
The David Lingren Media LIbrary Assistant WordPress plugin (versions up to and including 3.42 ) is vulnerable to a DOM-Based Cross-Site Scripting (XSS) flaw. This issue stems from the improper neutralization of input during web page generation. While specific exploit details or a remediation patc...
CVE-2026-116849 WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins StreamCast streamcast allows Stored XSS.This issue affects StreamCast: from n/a through 2.4.6...
CVE-2026-116849
The bPlugins StreamCast WordPress plugin (versions
CVE-2026-39737 WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.6...
CVE-2026-39737
The Crocoblock JetElements For Elementor WordPress plugin (versions through 2.9.2.6 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation. An attacker could potentially execute malicious scripts in the contex...
CVE-2026-115610 WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PublishPress PublishPress Authors publishpress-authors allows Stored XSS.This issue affects PublishPress Authors: from n/a through 4.17.0...
CVE-2026-115610
The PublishPress PublishPress Authors WordPress plugin (versions up to and including 4.17.0 ) is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. The root cause is the Improper Neutralization of Input During Web Page Generation . This flaw allows an attacker to store malicious sc...
CVE-2026-116857 WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.8.6.2...