1162748 matches found
PT-2026-91085
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
PT-2026-91067
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2023-28148
Paessler PRTG Network Monitoring is affected by a bodyclass Cross-Site Scripting (XSS) vulnerability in versions prior to 23.3.86.1520 . The vulnerability allows an attacker to inject scripts via the body class parameter, with a CVSS 3.1 score of 7.2 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N), ...
CVE-2026-90694: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...
PT-2026-91763
Name of the Vulnerable Software and Affected Versions michaelliao itranswarp versions prior to 2.20 Description A flaw in the Page Content Rendering component allows remote attackers to perform cross site scripting XSS, which is a technique used to inject malicious scripts into web pages viewed b...
CVE-2026-82781: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
PT-2026-91106
Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla 7.0.0, Snippets Pro extension for Joomla 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the...
PT-2026-91092
Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
PT-2026-91100
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82763: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82776: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82788: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82792: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82769: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82773: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-90604: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and ma...
PT-2026-91075
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2023-51769
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages...
PT-2026-91094
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...