Lucene search
+L

35606 matches found

CVE
CVE
added 2026/08/22 11:12 a.m.30 views

CVE-2026-66917

JoomGallery (a Joomla extension) versions prior to 4.3.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. An authenticated user with privileged access can embed an XSS payload in any image, resulting in JavaScript execution in the browser of every visitor who views the affected ...

8.6CVSS5.5AI score0.00466EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/08/22 11:12 a.m.13 views

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

8.6CVSS5.4AI score0.00466EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/08/22 11:12 a.m.34 views

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

8.6CVSS0.00466EPSS
SaveExploits1References1
NVD
NVD
added 2026/08/21 9:17 p.m.13 views

CVE-2026-69236

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, 12...

6.1CVSS0.00177EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 9:17 p.m.13 views

CVE-2026-69233

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

5.5CVSS0.00248EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 9:17 p.m.11 views

CVE-2026-69232

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are...

5.5CVSS0.00238EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 9:17 p.m.13 views

CVE-2026-69231

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are...

5.5CVSS0.00238EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 9:17 p.m.10 views

CVE-2026-69230

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

5.5CVSS0.00173EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:54 p.m.18 views

EUVD-2026-64162

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

5.5CVSS5.5AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:54 p.m.34 views

CVE-2026-69233

Esri Portal for ArcGIS (versions 11.5 and prior ) is affected by a stored cross-site scripting (XSS) vulnerability. A remote attacker with administrative privileges can inject malicious code that executes in a victim's browser, resulting in limited confidentiality and integrity impact. The CVSS 3...

5.5CVSS5.4AI score0.00248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/08/21 8:54 p.m.40 views

CVE-2026-69233 stored cross site scripting issue in Esri Portal for ArcGIS

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

5.5CVSS0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:53 p.m.29 views

CVE-2026-69235

Esri Portal for ArcGIS versions 11.5 and prior contain a stored cross-site scripting (XSS) vulnerability that allows a remote, privileged attacker to inject malicious code, potentially leading to arbitrary code execution in a victim's browser. The CVSS 3.1 score is 6.1 (Medium) with a scope chang...

6.1CVSS5.4AI score0.00177EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/08/21 8:53 p.m.39 views

CVE-2026-69235 stored cross site scripting issue in Esri Portal for ArcGIS

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are...

6.1CVSS0.00177EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:53 p.m.18 views

EUVD-2026-64160

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are...

6.1CVSS5.5AI score0.00177EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:53 p.m.15 views

EUVD-2026-64086

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, 12...

6.1CVSS5.5AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:53 p.m.40 views

CVE-2026-69236

A stored cross-site scripting (XSS) vulnerability in Esri Portal for ArcGIS versions 12.1 and prior allows a remote, privileged attacker to inject malicious code that can execute arbitrary JavaScript in a victim's browser. The CVSS 3.1 score is 6.1 (Medium) , reflecting network attack vector, low...

6.1CVSS5.3AI score0.00177EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/08/21 8:53 p.m.15 views

EUVD-2026-64085

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.3 and prior that allows a remote attacker with administrative privileges to insert arbitrary HTML into an administrative API. Users working with ArcGIS Enterprise 11.1, and 11.3 are encouraged to patch. All users are...

3.8CVSS5.7AI score0.0017EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:49 p.m.15 views

EUVD-2026-64082

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are...

5.5CVSS5.4AI score0.00238EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:49 p.m.26 views

CVE-2026-69232

Esri Portal for ArcGIS versions 11.5 and prior are affected by a stored cross-site scripting (XSS) vulnerability. A remote, privileged attacker can inject malicious code that executes arbitrary JavaScript in a victim's browser. The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting the high privilege re...

5.5CVSS5.3AI score0.00238EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/08/21 8:49 p.m.36 views

CVE-2026-69231 stored cross site scripting issue in Esri Portal for ArcGIS

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are...

5.5CVSS0.00238EPSS
SaveExploits0References1
Rows per page
Query Builder