CVE-2026-26270: Improper Neutralization of Input During Web Page Generation

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting XSS vulnerability exists in InvoicePlane latest version that allows an authenticated user with permissions to manage Invoice Groups to inject malicious JavaScript into...

CVE-2021-27887: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...

PT-2021-2785

Name of the Vulnerable Software and Affected Versions Hitachi ABB Power Grids Ellipse APM versions 5.1.0.6 and prior versions Hitachi ABB Power Grids Ellipse APM versions 5.2.0.3 and prior versions Hitachi ABB Power Grids Ellipse APM versions 5.3.0.1 and prior versions Description The issue is...