CVE-2026-30250

Beta Systems Software AG ANOW! Automate v.3.3.1.90 is vulnerable to a Cross-site scripting (XSS) vulnerability within the user documentation field . This flaw allows a remote attacker to execute arbitrary code. While the vulnerability is documented as XSS, the description explicitly notes the pot...

CVE-2026-30250

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...

PT-2026-77077

Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...

PT-2026-77222

Name of the Vulnerable Software and Affected Versions reportico-web versions prior to 8.1.1 Description A reflected cross-site scripting XSS issue allows remote attackers to execute arbitrary JavaScript in a user's web browser. This occurs when a malicious payload is included in the loadTemplate...

PT-2026-77996

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An unauthenticated attacker with network access via HTTP can compromise the Experience Manager component. This issue requires human interaction from ...

PT-2026-77066

Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...

PT-2026-77276

Name of the Vulnerable Software and Affected Versions Otalio Ship Property Management System versions prior to 2.22.0 Description Unescaped stored values in the application security page allow authenticated attackers to escalate privileges via persistent cross-site scripting XSS, a technique wher...

PT-2026-77060

Name of the Vulnerable Software and Affected Versions Kirki versions prior to 6.2.4 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting code into a web page. Recommendations Update to a...

PT-2026-77068

Name of the Vulnerable Software and Affected Versions Login With Ajax versions prior to 4.5.2 Description Cross Site Scripting XSS exists in the contributor section, allowing an attacker to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than 4.5...

PT-2026-77217

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...

PT-2026-77052

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

PT-2026-77760

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Hyperion Financial Reporting Server. This issue requires human interaction from a person...

PT-2026-78018

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low-privileged attacker with network access via HTTP to compromise the system. The...

PT-2026-79905

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization of user-controlled data rendered in pagination controls by...

PT-2026-79906

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization of user-controlled values rendered in table cell content b...

CVE-2026-54570: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

AngleSharp is a .NET library for parsing angle bracket based hyper-texts. Prior to 1.5.0, MathAnnotationXmlElement in AngleSharp/Mathml/Dom/Internal/MathAnnotationXmlElement.cs is not treated as an HTML integration point when its encoding attribute is text/html or application/xhtml+xml, causing...

PT-2026-76924

Name of the Vulnerable Software and Affected Versions Grav Form Plugin versions prior to 9.1.19 Description Field-definition properties in form templates, including prepend, append, spacer text, section text, and select option labels, are not properly escaped. This allows attackers with form...

PT-2026-76917

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description A cross-site scripting issue exists in the file upload validation flow. The software fails to escape filenames before inserting them into HTML using the insertAdjacentHTML function. This allows...

PT-2026-76948

Name of the Vulnerable Software and Affected Versions ArcadeDB server versions prior to 26.8.1 Description The server fails to propagate the authenticated principal to asynchronous command worker threads. When an HTTP command is submitted with the awaitResponse parameter set to false, it executes...

PT-2026-76915

Name of the Vulnerable Software and Affected Versions FileOrbis versions prior to 16.5 Description FileOrbis contains a stored cross-site scripting XSS flaw, which occurs when the application fails to properly neutralize input during the generation of web pages. This allows an attacker to inject...