Lucene search
+L

38887 matches found

EUVD
EUVD
added 2026/04/08 6:33 p.m.11 views

EUVD-2024-46646

The Gallery Blocks with Lightbox. Image Gallery, HTML5 video , YouTube, Vimeo Video Gallery and Lightbox for native gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘galleryID’ and 'className' parameters in all versions up to, and including, 3.2.1 due to...

6.4CVSS6.1AI score0.0047EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/04/08 6:33 p.m.12 views

EUVD-2024-46946

The Infinite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘projecturl’ parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

6.4CVSS6.1AI score0.00335EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/08 6:33 p.m.10 views

EUVD-2024-46939

The Silesia theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ attribute within the theme's Button shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS6.1AI score0.00331EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/08 6:24 p.m.26 views

CVE-2026-35169

CVE-2026-35169 – LORIS help_editor XSS risk Affected software: LORIS (Longitudinal Online Research and Imaging System) self-hosted web application. Vulnerability: The help_editor module failed to properly sanitize certain user-supplied variables, enabling a reflected cross-site scripting (XSS) at...

8.7CVSS5.9AI score0.00157EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/04/08 6:24 p.m.9 views

EUVD-2026-20574

LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. From to before 27.0.3 and 28.0.1, the helpeditor module of LORIS did not properly sanitize some user supplied variables which could result i...

8.7CVSS5.9AI score0.00157EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/08 6:01 p.m.18 views

EUVD-2026-20558

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the HTML sanitizer for ticket articles was missing proper sanitization of data: ... URI schemes, resulting in storing such malicious content in the database of the Zammad instance. The Zammad GUI is...

5.3CVSS5.9AI score0.00149EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/08 6:01 p.m.12 views

CVE-2026-34718 Zammad improperly neutralizes of script-related HTML tags in ticket articles

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the HTML sanitizer for ticket articles was missing proper sanitization of data: ... URI schemes, resulting in storing such malicious content in the database of the Zammad instance. The Zammad GUI is...

5.3CVSS5.9AI score
SaveExploits0References3
EUVD
EUVD
added 2026/04/08 3:04 p.m.12 views

EUVD-2026-20610

NiceGUI: Upload filename sanitization bypass via backslashes allows path traversal on Windows...

5.9CVSS5.9AI score0.00371EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/08 3:04 p.m.11 views

GHSA-W8WV-VFPC-HW2W NiceGUI: Upload filename sanitization bypass via backslashes allows path traversal on Windows

Summary The upload filename sanitization introduced in GHSA-9ffm-fxg3-xrhh uses PurePosixPathfilename.name to strip path components. Since PurePosixPath only recognizes forward slashes / as path separators, an attacker can bypass this sanitization on Windows by using backslashes \ in the upload...

5.9CVSS6.2AI score0.00371EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/08 2:30 p.m.71 views

CVE-2026-39392

CI4MS is a CodeIgniter 4-based CMS skeleton. Prior to 0.31.4.0, the Pages module does not apply html_purify to content on create/update, so page content is stored unsanitized and rendered as raw HTML on the public frontend. An authenticated admin with page-editing privileges can inject arbitrary ...

5.5CVSS6AI score0.00247EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2026/04/08 2:30 p.m.28 views

CVE-2026-39392 CI4MS has Stored XSS in Pages Content Due to Missing html_purify Sanitization

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the Pages module does not apply the htmlpurify validation rule to content fields during create and update operations, while the Blog...

5.5CVSS0.00247EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/08 2:30 p.m.12 views

CVE-2026-39392 CI4MS has Stored XSS in Pages Content Due to Missing html_purify Sanitization

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the Pages module does not apply the htmlpurify validation rule to content fields during create and update operations, while the Blog...

5.5CVSS6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/08 2:30 p.m.7 views

CVE-2026-39392 CI4MS has Stored XSS in Pages Content Due to Missing html_purify Sanitization

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the Pages module does not apply the htmlpurify validation rule to content fields during create and update operations, while the Blog...

5.5CVSS6AI score0.00247EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/04/08 2:07 p.m.15 views

python: Python: Command-line option injection in webbrowser.open() via crafted URLs

A flaw was found in Python. The webbrowser.open API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options,...

7.1CVSS6.2AI score0.00308EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/04/08 9:31 a.m.9 views

EUVD-2026-20106

The Columns by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the printclmns shortcode in all versions up to and including 1.0.3. This is due to insufficient input sanitization and output escaping on the 'id' attribute. The...

6.4CVSS6AI score0.00302EPSS
SaveExploits0References10
EUVD
EUVD
added 2026/04/08 9:31 a.m.15 views

EUVD-2026-20119

The Inquiry Form to Posts or Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Form Header' field in versions up to and including 1.0. This is due to insufficient input sanitization when saving via updateoption and lack of output escaping when displaying the stored...

4.4CVSS6.1AI score0.00254EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/04/08 9:31 a.m.13 views

EUVD-2026-20121

The Wavr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wave shortcode in all versions up to, and including, 0.2.6. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

6.4CVSS6.1AI score0.00188EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/08 9:25 a.m.8 views

CVE-2026-4303

The WP Visitor Statistics Real Time Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wsmshowDayStatsGraph' shortcode in all versions up to, and including, 8.4 due to insufficient input sanitization and output escaping on user supplied attributes. This...

6.4CVSS6.1AI score0.00274EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:23 a.m.6 views

CVE-2026-1396

The Magic Conversation For Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'magic-conversation' shortcode in all versions up to, and including, 3.0.97 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS6.1AI score0.00236EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/08 6:43 a.m.3 views

CVE-2026-5506 Wavr <= 0.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Wavr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wave shortcode in all versions up to, and including, 0.2.6. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

6.4CVSS6.1AI score0.00188EPSS
SaveExploits0References5
Rows per page
Query Builder