1135431 matches found
EUVD-2026-49688
Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...
CVE-2026-17528
CVE-2026-17528 affects the nice-select2 JavaScript plugin. Versions before 2.4.1 are vulnerable to XSS via the element, where a malicious payload is rendered into the DOM and can execute arbitrary scripts in a user’s browser when interacting with affected pages. The issue is tied to insufficient...
CVE-2026-17528
Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...
CVE-2026-17528
Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...
EUVD-2026-49657
Unauthenticated Cross Site Scripting XSS in Kali Forms = 2.4.18 versions...
EUVD-2026-49655
Unauthenticated Cross Site Scripting XSS in Anti Spam and list cleaner AcyChecker = 1.8.1 versions...
EUVD-2026-49656
Unauthenticated Cross Site Scripting XSS in Contest Gallery = 30.0.6 versions...
EUVD-2026-49662
Unauthenticated Cross Site Scripting XSS in GetGenie = 4.4.3 versions...
EUVD-2026-49663
Unauthenticated Cross Site Scripting XSS in Ultimate Addons for Contact Form 7 =3.5.45 versions...
EUVD-2026-49659
Unauthenticated Cross Site Scripting XSS in BackWPup = 5.7.4 versions...
EUVD-2026-49661
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.3 versions...
EUVD-2026-49665
Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...
EUVD-2026-49666
Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...
EUVD-2026-49669
Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...
PT-2026-65429
The Shortcodify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'name' Shortcode Attribute in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level acces...
PT-2026-65600
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack...
PT-2026-65526
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1 2, and 6.2.2.0 through 6.2.2.0 1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1 2, and 6.2.2.0 through 6.2.2.0 1 is vulnerable to stored cross-site scripting. This vulnerability allows a...
PT-2026-65391
The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before outputting them in a ticket history log, allowing users with the Editor role and above to perform Stored Cross-Site Scripting attacks that execute against higher-privileged users on...
