CVE-2026-46650: Improper Neutralization of Input During Web Page Generation

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, isAcceptedUrl in packages/renderer/htmlUtils.ts uses an unanchored regular expression for internal resource URLs, allowing a javascript: URL containing a matching 32-character...

CVE-2026-78847

All versions of gray-matter (verified on version 4.0.3 ) are vulnerable to arbitrary code execution. The flaw exists in the JavaScript engine located in lib/engines.js , where the application uses eval() to parse front matter when the language is set to js/javascript . While the documents do not ...

PT-2026-96129

Name of the Vulnerable Software and Affected Versions CuteNews version 2.1.2 Description Cross Site Scripting XSS occurs due to improper neutralization of the referer value. A remote attacker can execute arbitrary JavaScript within the session of an authenticated user by using a javascript: URI,...

CVE-2026-49995: Improper Neutralization of Input During Web Page Generation

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field stored in the newsletters table is inserted by data/interfaces/default/newsletterconfig.html into a JavaScript string without safe JSON encoding. An administrator or caller wi...

Linux Distros Unpatched Vulnerability : CVE-2026-54355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MapServer is a system for developing web-based GIS applications. From 6.0 until 8.6.4, MapServer's OpenLayers HTML output for...

CVE-2026-36472

CuteNews v.2.1.2 is vulnerable to a Cross-Site Scripting (XSS) flaw caused by the improper neutralization of the referer value. A remote attacker can exploit this by providing a javascript: URI , which is rendered as an unsanitized clickable link on the msg_info page. This allows the execution o...

PDF_XSS

Payloads All The PDFs A list of crafted malicious PDF files...

CVE-2026-84223: Improper Neutralization of Input During Web Page Generation

The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, allowing users with author-level access and above to upload a file containing JavaScript which is then served from the site's own origin and runs in the session of anyone who opens...

javadelight delight-nashorn-sandbox 0.5.5 Resource Consumption

javadelight delight-nashorn-sandbox version 0.5.5 contains an uncontrolled resource consumption vulnerability because dynamic JavaScript code evaluation can bypass statically inserted loop interruption checks and consume CPU...

CVE-2026-85680

The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it in the page title, and decodes HTML entities in it after its own sanitisation has already run, allowing unauthenticated attackers who register an account to sto...

CVE-2026-85680 Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title

The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it in the page title, and decodes HTML entities in it after its own sanitisation has already run, allowing unauthenticated attackers who register an account to sto...

CVE-2026-85680: Improper Neutralization of Input During Web Page Generation

The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it in the page title, and decodes HTML entities in it after its own sanitisation has already run, allowing unauthenticated attackers who register an account to sto...

PT-2026-95757

Name of the Vulnerable Software and Affected Versions Ultimate Member WordPress plugin versions prior to 2.13.1 Description An issue exists where the plugin fails to escape a value derived from user-supplied profile names before outputting it in the page title. Additionally, the software decodes...

CVE-2026-82890

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation...

Improper Encoding or Escaping of Output

Overview uri-js is a RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via pctDecChars, which decodes invalid and overlong percent-encoded sequences in...

CVE-2026-82890 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation...

CVE-2026-82890

IBM Guardium Data Protection 12.2 is vulnerable to improper neutralization of input during web page generation , allowing a remote authenticated attacker to execute arbitrary JavaScript code . The CVSS 3.1 score is 5.9 (MEDIUM) , with high attack complexity and low privileges required. No specifi...

EUVD-2026-83408

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation...

CVE-2026-82890 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation...

CVE-2026-93759

Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes it to the database as a server-side JavaScript expression. An unauthenticated party able to influence the value an application supplies as a query argument may cause code of their choosing...