CVE-2026-54380

VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated attackers to upload an SVG image containing malicious JavaScript to the shared storage bucket. Attackers can exploit the application's failure to restrict scripts or force downloads...

CVE-2026-106649

The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.29 does not prevent users with author-level access and above from storing arbitrary JavaScript in a form button configuration, which is later output into a JavaScript execution context and runs in the browser sessio...

CVE-2026-106649

The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin (versions prior to 2.4.29 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. Users with author-level access or higher can inject arbitrary JavaScript into a form button configuration. This malicious script is subsequ...

EUVD-2026-116714

The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.29 does not prevent users with author-level access and above from storing arbitrary JavaScript in a form button configuration, which is later output into a JavaScript execution context and runs in the browser sessio...

TencentOS Server 2: webkitgtk4 (TSSA-2026:1366)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1366 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

PT-2026-137206

Name of the Vulnerable Software and Affected Versions Readest versions prior to 0.11.10 Description In desktop Tauri builds, the download file and upload file commands within the apps/readest-app/src-tauri/src/transfer file.rs file fail to validate the file path variable. The application does not...

CVE-2026-39379

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content inside an AngularJS application without adequately...

EUVD-2026-116141

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content inside an AngularJS application without adequately...

CVE-2026-120988

billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering...

CVE-2026-120988

billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering...

CVE-2026-120988

The billboard.js library (versions before 4.1.3 ) is vulnerable to a Cross-Site Scripting (XSS) flaw. The issue stems from the improper sanitization of series ids during the rendering of legend templates, which allows an attacker to execute malicious JavaScript. No specific exploit links or remed...

EUVD-2026-115726

billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering...

CVE-2026-120988

billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering...

CVE-2025-7840

XSS Exploit for CVE-2025-7840 Author : Byte Reaper @ByteReaper0 Description Proof‑of‑concept exploit for CVE-2025-7840 , targeting a vulnerable web application endpoint that fails to sanitize user input on the Firstname parameter of a reservation form. By crafting a GET request to:...

CVE-2026-119735

Munshi by Petpooja before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to inject malicious markup through item descriptions or messages submitted in the Purchase Inquiry thread /purchase-inquiry/thread/thread-id, which is assigned to innerHTML...

CVE-2026-119735 Munshi XSS via Purchase Inquiry Thread Rendering

Munshi by Petpooja before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to inject malicious markup through item descriptions or messages submitted in the Purchase Inquiry thread /purchase-inquiry/thread/thread-id, which is assigned to innerHTML...

EUVD-2026-115366

Munshi by Petpooja before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to inject malicious markup through item descriptions or messages submitted in the Purchase Inquiry thread /purchase-inquiry/thread/thread-id, which is assigned to innerHTML...

CVE-2026-119735

Munshi (by Petpooja) versions prior to 2026-07-13 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists in the Purchase Inquiry thread (/purchase-inquiry/thread/{thread-id}) where malicious markup can be injected via item descriptions or messages. The root cause is ...

CVE-2026-111048 FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes

FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.9, the admin/support/notecreate endpoint stores the note parameter without sanitization in the supportticketnote table, and src/modules/Support/templates/admin/modsupporttickets.html.twig renders each store...

PDF.js 4.1.392 Arbitrary JavaScript Execution

PDF.js version 4.1.392 contains a missing type check in Type 1 font handling that allows arbitrary JavaScript execution in the PDF.js context. This proof of concept generates a crafted PDF using a FontMatrix payload. https://packetstorm.news/download/238893...