PT-2026-76915

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5...

PT-2026-77596

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. This...

PT-2026-77036

Unauthenticated Cross Site Scripting XSS in SSL Zen = 4.7.43 versions...

PT-2026-78247

Name of the Vulnerable Software and Affected Versions Media Library Assistant versions prior to 3.40 Description Improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS, a condition where malicious scripts are permanently stored on the target server...

PT-2026-77070

Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...

CVE-2026-68567: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...

PT-2026-77850

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Self Service...

EUVD-2026-61094

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...

PT-2026-77114

Name of the Vulnerable Software and Affected Versions Subscribe2 versions prior to 10.47 Description An unauthenticated Cross Site Scripting XSS issue exists in the Subscribe2 WordPress plugin. This flaw allows a remote attacker to execute malicious scripts in the browser of a user without...

PT-2026-77078

Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...

CVE-2026-73360: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...

PT-2026-77098

Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...

PT-2026-77039

Unauthenticated Cross Site Scripting XSS in Mayosis Core = 5.4.7 versions...

CVE-2026-66643: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...

CVE-2026-30250

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...

PT-2026-77069

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

PT-2026-77084

Unauthenticated Cross Site Scripting XSS in Autopay = 5.0.0 versions...

PT-2026-78011

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low privileged attacker with network access via HTTP to compromise the system. The...

CVE-2026-66638: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...

PT-2026-77196

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 5.1.0 through 5.4.7 Joomla! Core versions 6.0.0 through 6.1.2 Description Improper escaping flags in schema.org markup outputs create a Cross-Site Scripting XSS vector. XSS is a security flaw that allows an attacker to...