EUVD-2026-64707

NewSiteServer NSS developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting...

Exploit for CVE-2025-37654

Patch: CVE-2025-37654 Vulnerability Details - CVE: CVE...

CVE-2026-78282: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...

PT-2026-81062

Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...

PT-2026-80833

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

PT-2026-80826

Unauthenticated Cross Site Scripting XSS in Events Made Easy = 3.2.5 versions...

CVE-2022-30983

A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...

PT-2026-80817

Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...

CVE-2026-78414: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-66599: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...

PT-2026-80807

Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...

PT-2026-80806

Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...

CVE-2026-78263: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...

CVE-2026-32556: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...

PT-2026-80840

Unauthenticated Cross Site Scripting XSS in Urna = 2.6.2 versions...

PT-2026-81030

A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...

CVE-2026-78264: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...

CVE-2026-66623: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...

CVE-2026-32476: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

PT-2026-80980

Name of the Vulnerable Software and Affected Versions Metasys versions prior to 14.1.5 Metasys versions prior to 15.0.1 Description Improper neutralization of input during web page generation allows Cross Site Scripting XSS, a condition where malicious scripts are injected into trusted websites...