CVE-2026-73426: Improper Neutralization of Input During Web Page Generation

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...

CVE-2026-73382: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.2.0...

CVE-2026-73375: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73362: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in URL Shortify = 2.5.0 versions...

CVE-2026-73361: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Recipe Card Blocks for Gutenberg & Elementor = 3.4.18 versions...

CVE-2026-73360: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...

CVE-2026-73358: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...

CVE-2026-73351: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-73342: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...

CVE-2026-68567: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...

CVE-2026-68565: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...

CVE-2026-66667: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...

CVE-2026-66645: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...

CVE-2026-66644: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Typing Effect = 1.3.7 versions...

CVE-2026-66641: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66643: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...

CVE-2026-66640: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...

CVE-2026-66638: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...

CVE-2026-66637: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66629: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...