1162511 matches found
web-vulnerabilities-demo
Web Security — Five Common Vulnerabilities A hands-on project...
CVE-2026-81918 Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block
Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A user with editpagecontents permissions could store a payload which executes in the browser of any visitor who viewed a page where the block was configured to display a date-type...
CVE-2026-77490
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-77490
CVE-2026-77490 affects Microsoft Edge (Chromium-based) due to improper neutralization of input during web page generation, i.e., a cross-site scripting (XSS) flaw. An unauthorized attacker can leverage this over a network to perform spoofing . The CVSS 3.1 score is 6.1 (Medium) with a vector of A...
EUVD-2026-76247
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-62138
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...
CVE-2026-62111
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62110
Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...
[SECURITY] Fedora 45 Update: valkey-9.1.2-1.fc45
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
CVE-2026-88057
A flaw was found in Angular's @angular/core and @angular/compiler components. This vulnerability allows a remote attacker to bypass security sanitization mechanisms. By injecting malicious data into specific HTML attributes, an attacker can cause the application to execute arbitrary JavaScript co...
CVE-2026-62138
A Contributor-level Cross Site Scripting (XSS) vulnerability affects the Visual Composer Website Builder WordPress plugin in versions ≤ 45.16.1 . The flaw, discovered by sungbyeongchan, allows an attacker with Contributor privileges to inject malicious scripts via user interaction. The CVSS 3.1 s...
CVE-2026-62138 WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...
CVE-2026-62138 WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...
EUVD-2026-76199
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...
CVE-2026-62111
CVE-2026-62111 affects the WordPress Simple Payment plugin in versions 2.5.4 and below . The vulnerability is a Contributor-level Cross-Site Scripting (XSS) flaw, discovered by V1T via Patchstack. It carries a CVSS 3.1 score of 6.5 (MEDIUM) with a changed scope, requiring low privileges and user ...
EUVD-2026-76209
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62110
CVE-2026-62110 is a Contributor-level Cross-Site Scripting (XSS) vulnerability in the Bold Page Builder WordPress plugin, affecting versions 5.9.9 and earlier . The flaw was discovered by LevinityCyber and assigned a CVSS 3.1 score of 6.5 (MEDIUM) with a changed scope, requiring user interaction ...