CVE-2026-76526

The Splunk SOAR platform is affected by CVE-2026-76526 , which involves improper neutralization vulnerabilities categorized under CWE-707 . These issues were identified during an internal security review by Cisco as part of a software hardening release. No specific technical root cause, affected ...

CVE-2026-76302 Security Hardening in Splunk Enterprise - October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

CVE-2026-76302

CVE-2026-76302 identifies a security hardening release in Splunk Enterprise (October 2026) addressed by Cisco. The vulnerability involves improper neutralization issues categorized under CWE-707 . While the internal review identified multiple vulnerabilities, specific technical details regarding ...

CVE-2026-76475

Several Cisco Unified Communications Products are affected by Cross-site Scripting (XSS) vulnerabilities, specifically involving improper neutralization of input during web page generation (CWE-79 ). Impacted products include Cisco Emergency Responder , Cisco Prime Collaboration Deployment , Cisc...

EUVD-2026-107387

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...

CVE-2026-76475 Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...

CVE-2026-111848 WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22...

CVE-2026-111848 WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22...

CVE-2026-111848

The Geo Mashup WordPress plugin (versions

CVE-2026-110899 WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kevin Stover Ninja Forms ninja-forms allows Stored XSS.This issue affects Ninja Forms: from n/a through 3.15.5...

CVE-2026-110899

The Ninja Forms WordPress plugin (versions

CVE-2026-110899 WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kevin Stover Ninja Forms ninja-forms allows Stored XSS.This issue affects Ninja Forms: from n/a through 3.15.5...

CVE-2026-107435

The WP Chill Strong Testimonials WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This security flaw affects versions from n/a through 3.3.12 . While the vulnerability allows for script execution in the con...

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

PT-2026-120860

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

CVE-2026-112833

The Castos Seriously Simple Podcasting plugin for WordPress (versions n/a through 3.17.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This vulnerability stems from the improper neutralization of input during web page generation. An attacker could potentially execute malicious scripts in...

CVE-2026-112833 WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0...

CVE-2026-18205 XSS in Ticimax Informatics' Ticimax E-Commerce Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...

CVE-2026-18205

The Ticimax E-Commerce Platform developed by Ticimax Informatics Technologies Inc. is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This issue is caused by the improper neutralization of input during web page generation. An attacker could potentially execute malicious scripts in a us...