CVE-2026-71447 Stored Cross-Site Scripting in Chat and Forum Translation Controls in ail-framework

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2026-66709

creationtimestamp| type| source ---|---|--- 2026-08-06 16:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggxseog32p 2026-08-06 21:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgws3k3xd2l...

CVE-2026-65575

creationtimestamp| type| source ---|---|--- 2026-08-06 16:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggn4vxwm2a 2026-08-06 18:06:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msgn22kamc2e 2026-08-06 18:06:45+00:00| seen|...

CVE-2026-66710

creationtimestamp| type| source ---|---|--- 2026-08-06 16:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgfzgsj2h2z 2026-08-06 16:08:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/clljb6nruttbm...

CVE-2026-63687

creationtimestamp| type| source ---|---|--- 2026-08-06 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u 2026-08-06 21:11:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl 2026-08-07 10:07:06+00:00| seen|...

CVE-2026-68079

creationtimestamp| type| source ---|---|--- 2026-08-06 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfc5inum2h 2026-08-06 21:24:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/i4vkmjasii72h 2026-08-07 04:07:06+00:00| seen|...

CVE-2026-64564

creationtimestamp| type| source ---|---|--- 2026-08-06 15:03:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/55u7vzwmlbett 2026-08-06 15:22:49+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117049246952190178 2026-08-06 15:25:14+00:00| seen|...

CVE-2026-18970

creationtimestamp| type| source ---|---|--- 2026-08-06 11:00:40+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048216095721886 2026-08-06 11:00:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msfva7xipf2t...

WordPress TableOn – WordPress Posts Table Filterable  plugin <= 1.0.5.1 - Unauthenticated Blind SQL Injection vulnerability

Unauthenticated Blind SQL Injection vulnerability discovered by Athiwat Tiprasaharn Jitlada, Itthidej Aramsri Boeing777, Waris Damkham in WordPress Plugin TableOn versions = 1.0.5.1...

CVE-2026-18400

The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'delay' Post Meta Setting in all versions up to, and including, 3.111.0 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-11588 EONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post Creation

The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any authorisation check on one of its REST API routes and disables HTML sanitisation before saving the post, allowing unauthenticated attackers to create administrator-attributed published posts containing arbitrary web scripts...

CVE-2026-11588 EONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post Creation

The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any authorisation check on one of its REST API routes and disables HTML sanitisation before saving the post, allowing unauthenticated attackers to create administrator-attributed published posts containing arbitrary web scripts...

CVE-2026-71447: Improper Neutralization of Input During Web Page Generation

AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message and post identifiers directly into inline JavaScript onclick handlers: onclick="translateMessageToPreferredLanguage'...

CVE-2026-71319

creationtimestamp| type| source ---|---|--- 2026-08-05 22:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msekiznbnx2z 2026-08-05 22:26:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fsizpdnyrbkp 2026-08-05 23:01:06+00:00| seen|...

EUVD-2026-53611

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of request-handling worker processes by sending a crafted form-encoded HTTP POST request containing deeply nested parameter...

CVE-2026-9077

creationtimestamp| type| source ---|---|--- 2026-08-05 18:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mse4aiafpl2x 2026-08-05 18:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3rfvjndj5taqu 2026-08-07 15:07:06+00:00| seen|...

CVE-2026-20272

creationtimestamp| type| source ---|---|--- 2026-08-05 17:07:01+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdzafb4i22n 2026-08-05 17:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse23ct2hz23 2026-08-06 05:17:16+00:00| seen|...

CVE-2026-20304

creationtimestamp| type| source ---|---|--- 2026-08-05 16:51:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdyet7jwc24 2026-08-05 17:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse23e2oxs2p 2026-08-06 03:17:09+00:00| seen|...

MAL-2026-12787 Malicious code in dynstrg-howto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800fab99d95f1a2cef6ebf269ca240bf60518735cfb58c7c24b6a8474c72ee77 package.json declares a preinstall hook that runs index.js on npm install. index.js collects the installer's hostname, username, home directory, DNS...

WordPress Netroics Blog Posts Grid plugin <= 1.0 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability

Authenticated Editor+ Stored Cross-Site Scripting vulnerability discovered by saitamang, syad, yunaranyancat in WordPress Plugin Netroics Blog Posts Grid versions = 1.0...