2218 matches found
CVE-2026-114694
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8...
EUVD-2026-109256
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8...
CVE-2026-114694 WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8...
EUVD-2026-109253
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1...
CVE-2026-112838 WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.8...
CVE-2026-112838
The WordPress VikRentCar plugin (versions
CVE-2026-112313
The ACF Extended WordPress plugin (versions up to and including 0.9.2.7 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation , which allows an attacker to inject malicious scripts that are stored on the serv...
CVE-2026-112313 WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ACF Extended ACF Extended acf-extended allows Stored XSS.This issue affects ACF Extended: from n/a through 0.9.2.7...
EUVD-2026-108111
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ACF Extended ACF Extended acf-extended allows Stored XSS.This issue affects ACF Extended: from n/a through 0.9.2.7...
CVE-2026-111830 WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0...
CVE-2026-111830
The WP Mailster WordPress plugin (versions
CVE-2026-112867
The WordPress H5P plugin (versions up to and including 1.17.9 ) is vulnerable to a Stored Cross-Site Scripting (XSS) issue due to the Improper Neutralization of Input During Web Page Generation . An attacker can exploit this flaw to execute malicious scripts in the context of the victim's browser...
CVE-2026-112867 WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...
CVE-2026-84915
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...
CVE-2026-84915
The Component blocks module for Drupal (versions 0.0.0 through 1.2.7 ) is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is the insufficient validation of user input before it is processed during token replacement . Practical exploitation requires the attacker to possess a role ...
EUVD-2026-107876
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...
CVE-2026-84915 Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...
CVE-2026-84915 Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...
CVE-2026-87939
The Drupal Feed Block module is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to sufficiently validate or sanitize the RSS feeds it generates from remote sources. This allows an attacker to inject malicious scripts into web pages viewed by other users. The issue affects version...