CVE-2026-107866

The Crocoblock JetElements For Elementor plugin (jet-elements) is vulnerable to Stored Cross-Site Scripting (XSS) due to the Improper Neutralization of Input During Web Page Generation (CWE-79). This vulnerability affects versions from n/a through 2.9.2.3 . Exploitation of this flaw can allow an ...

CVE-2026-107866 WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.3...

xnuspy

xnuspy Salida del registro del kernel después de compilar y ejecutar example/open1hook.c xnuspy es un módulo de pongoOS que instala una nueva llamada al sistema, xnuspyctl, que permite enganchar funciones del kernel desde el espacio de usuario. Es compatible con iOS 13.x, iOS 14.x y iOS 15.x en...

CVE-2026-108570

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special...

CVE-2026-108570 Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special...

EUVD-2026-96876

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special...

CVE-2026-108570

A security flaw exists in the Furion .NET Framework (up to version 4.9.9.95) within the View Engine component. Specifically, the RunCompile function in the file framework/Furion/ViewEngine/Engines/ViewEngine.cs fails to properly neutralize special elements used in the template engine when process...

CVE-2026-108570: Improper Neutralization of Special Elements Used in a Template Engine

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special...

PT-2026-110102

Name of the Vulnerable Software and Affected Versions Furion .NET Framework versions prior to 4.9.9.96 Description A flaw in the View Engine component allows remote attackers to manipulate the content argument within the RunCompile function of the framework/Furion/ViewEngine/Engines/ViewEngine.cs...

EUVD-2026-96424

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2...

CVE-2026-94160 WordPress ThemeStek Extras for LabtechCO Theme plugin <= 8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeStek ThemeStek Extras for LabtechCO Theme themestek-labtechco-extras allows Reflected XSS.This issue affects ThemeStek Extras for LabtechCO Theme: from n/a through 8.4...

CVE-2026-97263 WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through 2.3.4...

CVE-2026-97263

The WPAdverts plugin by Greg Winiarski is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This issue affects versions up to and including 2.3.4 . Exploitation details are not provided in the documents.

CVE-2026-102388

The WPMU DEV Forminator WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions 1.57.3 and below . The root cause is the improper neutralization of input during web page generation , which allows an attacker to store and execute malicious scripts. Exploitation details are ...

CVE-2026-102388 WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.57.3...

CVE-2026-93951

The WordPress Zeinet theme (versions

CVE-2026-93951 WordPress Zeinet theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bracketweb Zeinet zeinet allows Reflected XSS.This issue affects Zeinet: from n/a through 1.0.0...

CVE-2026-102388: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.57.3...

CVE-2026-93951: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bracketweb Zeinet zeinet allows Reflected XSS.This issue affects Zeinet: from n/a through 1.0.0...

PT-2026-109790

Name of the Vulnerable Software and Affected Versions Kids Planet versions prior to 2.2.14.2 Description ThemeREX Group Kids Planet contains an issue where input is not properly neutralized during web page generation, leading to Reflected Cross-site Scripting XSS. This occurs when an application...