CVE-2026-114703 WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

EUVD-2026-108083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicdark ND Shortcodes For Visual Composer nd-shortcodes allows Stored XSS.This issue affects ND Shortcodes For Visual Composer: from n/a through 7.8...

CVE-2026-111830 WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0...

CVE-2026-111830

The WP Mailster WordPress plugin (versions

EUVD-2026-108053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through 1.3.68...

CVE-2026-112867 WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...

CVE-2026-112867

The WordPress H5P plugin (versions up to and including 1.17.9 ) is vulnerable to a Stored Cross-Site Scripting (XSS) issue due to the Improper Neutralization of Input During Web Page Generation . An attacker can exploit this flaw to execute malicious scripts in the context of the victim's browser...

CVE-2026-114184

The WPVibes Elementor Addon Elements plugin (specifically addon-elements-for-elementor-page-builder) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions from n/a through 1.14.4 . Exploitation details ar...

CVE-2026-114184 WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through 1.14.4...

CVE-2026-96382

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2...

CVE-2026-84915

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...

CVE-2026-84915 Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...

EUVD-2026-107876

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...

CVE-2026-84915 Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...

CVE-2026-84915

The Component blocks module for Drupal (versions 0.0.0 through 1.2.7 ) is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is the insufficient validation of user input before it is processed during token replacement . Practical exploitation requires the attacker to possess a role ...

CVE-2026-87939

The Drupal Feed Block module is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to sufficiently validate or sanitize the RSS feeds it generates from remote sources. This allows an attacker to inject malicious scripts into web pages viewed by other users. The issue affects version...

EUVD-2026-107810

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2...

CVE-2026-96382 Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2...

CVE-2026-76526

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

CVE-2026-76302

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...