EUVD-2026-50888

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17878

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50594

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17818

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17818

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17797

CVE-2026-17797 affects Google Chrome/Chromium’s CSS implementation, allowing UXSS via a crafted HTML page in versions before 151.0.7922.72. The vulnerability stems from an inappropriate CSS implementation and can be triggered remotely (attack vector: NETWORK; user interaction required). Upstream ...

EUVD-2026-50746

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17761

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17734

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-51684

CVE-2025-51684 affects CleverTap Web SDK v1.15.1. The issue is a Cross Site Scripting (XSS) weakness where untrusted data received via window.postMessage is not sanitized before injecting into the DOM by renderCustomHtml, enabling arbitrary JavaScript execution in the hosting site context. Exploi...

CVE-2025-65342

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

PT-2026-66058

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML UXSS via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2025-65342

CVE-2025-65342 affects code-projects Blood System 1.0. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the city field in /don.php. The description and connected sources confirm the affected product and the input vector, but do not provide details on root cause, specific pay...

PT-2026-66576

Name of the Vulnerable Software and Affected Versions CleverTap Web SDK version 1.15.1 Description Cross Site Scripting XSS occurs because the application fails to sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious...

CVE-2025-65341

CVE-2025-65341 affects Ecommerce Fruits Bazar 1.0 and is described as a Cross Site Scripting (XSS) vulnerability in the script admin/edit_product.php. The associated metrics show CVSS v3.1 base score 6.1 (Medium) with attack vector Network, attack complexity Low, privileges Required None, user in...

PT-2026-66578

Name of the Vulnerable Software and Affected Versions Ecommerce Fruits Bazar version 1.0 Description Cross Site Scripting XSS occurs in the 'admin/edit product.php' endpoint. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. Recommendations At...

CVE-2025-65341

Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting XSS in admin/editproduct.php...

EUVD-2025-210560

Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting XSS in admin/editproduct.php...

EUVD-2025-210564

CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting XSS. The application does not sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious message that, when processed by renderCustomHtml, results in execution of...

CVE-2025-51684

CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting XSS. The application does not sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious message that, when processed by renderCustomHtml, results in execution of...