1163369 matches found
PT-2026-78981
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
PT-2026-78970
Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...
org.springframework.integration:spring-integration-groovy (>=7.0.0-m1, <=7.0.5) potentially affected by CVE-2026-59321 via org.springframework.integration:spring-integration-scripting (>=7.0.0-m1, <=7.0.5)
org.springframework.integration:spring-integration-scripting MAVEN version =7.0.0-m1, =7.0.0-m1, =7.0.5 Source cves: CVE-2026-59321 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKINTEGRATION-19265077...
CVE-2026-77643: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...
CVE-2026-66597: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in wpDataTables = 6.5.1.4 versions...
CVE-2026-66581: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...
CVE-2026-71368: Improper Neutralization of Input During Web Page Generation
F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...
CVE-2026-66673: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Flatastic = 2.0 versions...
CVE-2026-66614: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.2 versions...
CVE-2026-66606: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...
CVE-2026-73402: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
CVE-2026-66615: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
CVE-2026-66612: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...
CVE-2026-66611: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Paymob for WooCommerce = 4.1.10 versions...
CVE-2026-66605: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Swatchly – WooCommerce Variation Swatches for Products = 1.4.13 versions...
CVE-2026-66598: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...
CVE-2026-66590: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...
CVE-2026-66582: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...
PT-2026-78977
Name of the Vulnerable Software and Affected Versions Flatastic versions 2.0 and earlier Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...