CVE-2026-107797: Improper Neutralization of Input During Web Page Generation

Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters. Attackers can send crafted links to authenticated users, breaking out of unencoded inline JavaScript string...

CVE-2026-104646: Improper Neutralization of Input During Web Page Generation

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...

PT-2026-108001

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description An...

CVE-2026-94448: Undefined Security Weakness

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are...

PT-2026-108319

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists where the context tracking state is not properly reset when a JavaScript template literal contains consecutive expressions. This failure to reset...

CVE-2026-94448: Improper Neutralization of Input During Web Page Generation

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are...

CVE-2026-13258: Improper Neutralization of Input During Web Page Generation

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended...

CVE-2026-107380: Improper Neutralization of Input During Web Page Generation

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer's isHrefSafeValue validates an SVG href after XML DTD entity expansion, but saveXML serializes the original entity reference after removing the DTD declaration. A crafted entity such as Tab can appear to the sanitizer as a...

PT-2026-108193

Name of the Vulnerable Software and Affected Versions Indico versions prior to 3.3.13 Description Users with permissions to manage events or create content, such as speakers uploading materials, can store crafted JavaScript URLs in fields that accept custom URLs. A user who follows one of these...

PT-2026-108256

Name of the Vulnerable Software and Affected Versions Jivejdon versions 5489372d through ee67a65e Description A reflected cross-site scripting issue exists in the 'application/query/taggedThreadList.jsp' endpoint. Unauthenticated attackers can inject scripts through the unencoded tagID and count...

PT-2026-108153

Name of the Vulnerable Software and Affected Versions dot-access versions 0.0.3 through 1.0.0 Description A code injection flaw exists where the get function concatenates user-supplied paths into a new Function body within index.js. This allows remote attackers to access constructor.constructor t...

CVE-2026-107396: Incomplete Denylist to Cross-Site Scripting

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, users who can manage events or create content, including speakers who can upload material, can store crafted javascript URLs in fields that accept custom URLs. A user...

CVE-2026-107700: Improper Control of Generation of Code

dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get. The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load childprocess and run...

PT-2026-108261

Name of the Vulnerable Software and Affected Versions Jivejdon versions prior to 5.1 Description Authenticated attackers can execute JavaScript on the application origin by uploading attachments with a manipulated Content-Type. By uploading a file declared as text/html, the UploadShowAction...

CVE-2026-14990: Improper Neutralization of Input During Web Page Generation

IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

NPM: Payload: Uploaded XML files could execute same-origin JavaScript

NPM: Payload: Uploaded XML files could execute same-origin JavaScript vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

Payload: Uploaded XML files could execute same-origin JavaScript

Impact Under certain local upload configurations, an uploaded XML file and stylesheet could execute JavaScript in the Payload origin when a logged-in user opens the file. You are affected if: - You accept XML uploads accepted by default. Patches Users should upgrade Payload packages to = 3.90.0 o...

GHSA-9QPG-3CF8-W33X Payload: Uploaded XML files could execute same-origin JavaScript

Impact Under certain local upload configurations, an uploaded XML file and stylesheet could execute JavaScript in the Payload origin when a logged-in user opens the file. You are affected if: - You accept XML uploads accepted by default. Patches Users should upgrade Payload packages to = 3.90.0 o...

Security Bulletin:ip-address IPv4-mapped/NAT64 IPv6 Address SSRF Vulnerability Fix in 10.2.1

Summary ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType classifies an address by matching it against a table of known...

Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty

Summary There are multiple vulnerabilities in Java, JavaScript and IBM WebSphere Application Server Liberty used by IBM Transformation Advisor. Vulnerability Details CVEID:CVE-2026-75899 DESCRIPTION: fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and...