Lucene search
+L

1135806 matches found

EUVD
EUVD
added 51 minutes ago3 views

EUVD-2026-57343

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

5.2AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2 hours ago2 views

CVE-2026-73237

XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

5.1AI score
SaveExploits0References3Affected Software1
CVE
CVE
added 2 hours ago8 views

CVE-2026-73237

Apache Allura is affected by an XSS in the Markdown handling pipeline. The vulnerability applies to Allura versions 1.10.0 through 1.19.0 (i.e., before 1.19.1). The issue exists in the Markdown processing code path and can allow injection when rendering Markdown content. The recommended remediati...

5.1AI score
SaveExploits0References3
Cvelist
Cvelist
added 2 hours ago9 views

CVE-2026-73238 Apache Allura: XSS in code display

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

SaveExploits0References2
CVE
CVE
added 2 hours ago12 views

CVE-2026-73238

The CVE concerns Apache Allura before version 1.19.1, where an XSS vulnerability existed in the code display component. Impact is limited to attacker-controlled injection in the display of code, with the documented mitigation being an upgrade to Allura 1.19.1, which fixes the issue. No exploitati...

5.2AI score
SaveExploits0References3
CVE
CVE
added 2 hours ago11 views

CVE-2026-48552

Affected software : Nagios Core prior to 4.5.14 and Nagios XI prior to 2026R1.7. Component : jsonquery.js. Root cause : unencoded JSON string values reflected from stored fields are injected into the DOM without sanitization. Impact : DOM-based cross-site scripting allowing arbitrary JavaScript e...

5.4CVSS5AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 12 hours ago6 views

firefox: thunderbird: Site isolation issue in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

5.4CVSS6AI score0.00339EPSS
SaveExploits0References6
NVD
NVD
added 13 hours ago6 views

CVE-2026-17013

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into an inline script block, which could allow unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone who is tricked into opening a crafted...

6.1CVSS
SaveExploits0References1
NVD
NVD
added 13 hours ago4 views

CVE-2026-16066

The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it on the product pages, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any visitor viewing the product page...

5.4CVSS
SaveExploits0References1
Nuclei
Nuclei
added 13 hours ago25 views

PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php. id: CVE-2023-40751 info: name: PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | PHPJabbers Fundraising Script v1.0 is...

6.1CVSS6.1AI score0.01044EPSS
SaveExploits0References2
Nuclei
Nuclei
added 13 hours ago16 views

Blesta <= 5.13.1 - Cross-Site Scripting

Blesta 3.x through 5.x before 5.13.3 contains an input validation vulnerability caused by mishandling input, letting attackers potentially exploit the system, exploit requires unspecified conditions. id: CVE-2026-25616 info: name: Blesta = 5.13.1 - Cross-Site Scripting author: 0xAkoko severity:...

6.1CVSS5.2AI score0.00383EPSS
SaveExploits1References3
Nuclei
Nuclei
added 13 hours ago43 views

Broadstreet WordPress plugin - Reflected XSS

Broadstreet WordPress plugin 1.51.8 contains a reflected XSS caused by unsanitised and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires victim interaction. id: CVE-2025-4652 info: name: Broadstreet WordPress plugin -...

6.1CVSS5.2AI score0.00464EPSS
SaveExploits1References1
Nuclei
Nuclei
added 13 hours ago31 views

NewsTicker <= 1.0 - Reflected Cross-Site Scripting

NewsTicker WordPress plugin v1.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craft a maliciou...

6.1CVSS8.4AI score0.00579EPSS
SaveExploits1References2
Nuclei
Nuclei
added 13 hours ago16 views

WP MediaTagger <= 4.1.1 - Cross-Site Scripting

WP MediaTagger WordPress plugin = 4.1.1 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires user interaction or victim to visit a malicious link. id:...

6.1CVSS8.2AI score0.00582EPSS
SaveExploits1References2
Nuclei
Nuclei
added 13 hours ago46 views

Widget4Call WordPress - Cross-Site Scripting

Widget4Call WordPress plugin = 1.0.7 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13099 info: name:...

5.4CVSS8.4AI score0.0068EPSS
SaveExploits1References1
Nuclei
Nuclei
added 13 hours ago12 views

WordPress Google Map Professional - Cross-Site Scripting

WordPress Google Map Professional Map In Your Language plugin through 1.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such ...

6.1CVSS8.2AI score0.0057EPSS
SaveExploits1References2
Nuclei
Nuclei
added 13 hours ago40 views

WP Triggers Lite - Cross-Site Scripting

WP Triggers Lite WordPress plugin v2.5.3 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

7.1CVSS8.2AI score0.0056EPSS
SaveExploits1References2
Nuclei
Nuclei
added 13 hours ago16 views

Privacy Policy Genius - Cross-Site Scripting

Privacy Policy Genius WordPress plugin v2.0.4 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13219...

6.1CVSS8.2AI score0.0057EPSS
SaveExploits1References2
Nuclei
Nuclei
added 13 hours ago15 views

Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting

Dyn Business Panel WordPress plugin = 1.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter in output, letting attackers execute scripts in the context of high privilege users, exploit requires victim to click a malicious link. id: CVE-2024-130...

7.1CVSS8.2AI score0.00526EPSS
SaveExploits1References2
Nuclei
Nuclei
added 13 hours ago14 views

LifterLMS < 8.0.1 - Cross-Site Scripting

LifterLMS WordPress plugin before 8.0.1 contains a reflected XSS caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin via a crafted request. id: CVE-2024-13619 info: name: LifterLMS 8.0.1 - Cross-Site Scripting author:...

6.1CVSS5.2AI score0.00549EPSS
SaveExploits1References3
Rows per page
Query Builder