CVE-2026-4335: Improper Neutralization of Input During Web Page Generation

The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment posttitle in all versions up to, and including, 6.4.3. This is due to insufficient output escaping in the getEditorPopup function and its corresponding media-popup.php template...

CVE-2018-12626

An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter...

EUVD-2004-1531

Malware in sbrugna...

EUVD-2020-16605

Malware in sbrugna...

CVE-2024-13215: Exposure of Private Personal Information to an Unauthorized Actor

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.10 via the 'render' function in modules/modal-popup/widgets/modal-popup.php. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2023-24657

phpipam v1.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the closeClass parameter at /subnet-masks/popup.php...

CVE-2023-24657

phpipam v1.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the closeClass parameter at /subnet-masks/popup.php...

CVE-2023-24657: Improper Neutralization of Input During Web Page Generation

phpipam v1.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the closeClass parameter at /subnet-masks/popup.php...

CVE-2023-24657

phpIPAM 1.6 contains a reflected Cross‑Site Scripting (XSS) vulnerability via the closeClass parameter in /subnet-masks/popup.php. The issue allows injecting arbitrary script into a victim’s browser, potentially exposing cookies or enabling further attacks. The CVE entry (CVE-2023-24657) is rated...

NeDi <= 1.9C Multiple XSS Vulnerabilities

NeDi is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-23868

NeDi 1.9C allows inc/rt-popup.php d XSS...

Cross site scripting

NeDi 1.9C allows inc/rt-popup.php d XSS...

CVE-2020-23868

CVE-2020-23868 affects NeDi 1.9C, where the inc/rt-popup.php handler is vulnerable to cross-site scripting due to insufficient validation of client-side data. This is corroborated by the NVD entry and OpenVAS entries describing NeDi

CVE-2014-4548

CVE-2014-4548 : The Ruven Toolkit WordPress plugin (

CVE-2014-4548: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter...

CVE-2018-12626

An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter...

CVE-2018-12626

An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter...

CVE-2018-12626: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter...

adailyapple.com XSS vulnerability

Open Bug Bounty ID: OBB-650917 Description| Value ---|--- Affected Website:| adailyapple.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

joycecastle.com XSS vulnerability

Open Bug Bounty ID: OBB-650421 Description| Value ---|--- Affected Website:| joycecastle.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...