Lucene search
+L

1134162 matches found

NVD
NVD
added 2026/07/19 3:16 a.m.10 views

CVE-2026-16205

A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialcharsdecode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead to cross site scripting. It is possible ...

4.8CVSS0.00202EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/19 2:16 a.m.8 views

CVE-2026-16203

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /forCYS.php. Such manipulation of the argument course leads to cross site scripting. The attack may be performed from remote. The exploit is...

5.1CVSS0.00199EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/19 2:16 a.m.9 views

CVE-2026-16202

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /CYS.php. This manipulation of the argument course causes cross site scripting. The attack is possible to be carried out remotely. The...

5.1CVSS0.00199EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/19 2:0 a.m.41 views

CVE-2026-16205 Pluck CMS Albums albums.admin.php htmlspecialchars_decode cross site scripting

A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialcharsdecode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead to cross site scripting. It is possible ...

4.8CVSS0.00202EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/19 2:0 a.m.13 views

EUVD-2026-45416

A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialcharsdecode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead to cross site scripting. It is possible ...

4.8CVSS3.2AI score0.00202EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/19 2:0 a.m.6 views

CVE-2026-16205

A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialcharsdecode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead to cross site scripting. It is possible ...

4.8CVSS3.1AI score0.00202EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/07/19 2:0 a.m.15 views

CVE-2026-16205

In Pluck CMS up to version 4.7.21, the vulnerability affects the Albums Module (data/modules/albums/albums.admin.php) via the function htmlspecialchars_decode. Manipulating the Info argument can trigger cross-site scripting, with remote exploitation possible. Public exploit exists. The project wa...

4.8CVSS3.2AI score0.00202EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/19 2:0 a.m.6 views

CVE-2026-16205 Pluck CMS Albums albums.admin.php htmlspecialchars_decode cross site scripting

A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialcharsdecode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead to cross site scripting. It is possible ...

4.8CVSS3.1AI score0.00202EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/07/19 1:30 a.m.42 views

CVE-2026-16203 SourceCodester Class and Exam Timetabling System forCYS.php cross site scripting

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /forCYS.php. Such manipulation of the argument course leads to cross site scripting. The attack may be performed from remote. The exploit is...

5.1CVSS0.00199EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/19 1:30 a.m.10 views

EUVD-2026-45414

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /forCYS.php. Such manipulation of the argument course leads to cross site scripting. The attack may be performed from remote. The exploit is...

5.1CVSS3.4AI score0.00199EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/19 1:30 a.m.20 views

CVE-2026-16203

SourceCodester Class and Exam Timetabling System 1.0 contains a cross-site scripting (XSS) vulnerability in the /forCYS.php file, triggered by manipulation of the course parameter. The issue can be exploited remotely, and public exploit code exists. The CVSS vectors indicate a network-based, low ...

5.1CVSS3.4AI score0.00199EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/19 1:15 a.m.13 views

EUVD-2026-45413

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /CYS.php. This manipulation of the argument course causes cross site scripting. The attack is possible to be carried out remotely. The...

5.1CVSS3.6AI score0.00199EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/19 1:15 a.m.43 views

CVE-2026-16202 SourceCodester Class and Exam Timetabling System CYS.php cross site scripting

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /CYS.php. This manipulation of the argument course causes cross site scripting. The attack is possible to be carried out remotely. The...

5.1CVSS0.00199EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/19 1:15 a.m.21 views

CVE-2026-16202

SourceCodester Class and Exam Timetabling System 1.0 is affected by a cross-site scripting vulnerability in the /CYS.php file, triggered by manipulating the course parameter. The issue allows remote exploitation and has publicly disclosed exploits according to the linked reports. The precise vuln...

5.1CVSS3.6AI score0.00199EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/19 12:30 a.m.11 views

EUVD-2026-45403

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /forexam.php. The manipulation of the argument day results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to...

5.1CVSS3.7AI score0.00199EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/07/19 12:0 a.m.7 views

openSUSE 16 Security Update : grafana (openSUSE-SU-2026:21366-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21366-1 advisory. Changes in grafana: - CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints bsc1271331 -...

7.5CVSS5.9AI score0.00388EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.14 views

PT-2026-61039

A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialchars decode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead to cross site scripting. It is possible...

4.8CVSS3.2AI score0.00202EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/18 10:16 p.m.11 views

CVE-2026-16156

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /forexam.php. The manipulation of the argument day results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to...

5.1CVSS0.00199EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/18 9:17 p.m.10 views

CVE-2026-12228

A stored cross-site scripting XSS vulnerability exists in the POST /api/prompts/share endpoint of parisneo/lollms latest version. The endpoint stores attacker-controlled promptcontent into DBDirectMessage.content without server-side sanitization. When a victim opens the direct message DM thread,...

8.7CVSS0.00261EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/18 9:17 p.m.11 views

CVE-2026-57857

The Flow Payment plugin for WordPress flow.cl version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page. When the plugin handles an order cancellation, the errormessage GET parameter is passed directly to wcaddnotice in flowpayment-fl.php lines 57-58 without...

5.1CVSS0.00224EPSS
SaveExploits0References2
Rows per page
Query Builder