1164301 matches found
PT-2026-79906
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization of user-controlled values rendered in table cell content b...
PT-2026-80393
Apache Answer vulnerable to Cross-site Scripting in github.com/apache/answer...
PT-2026-78018
Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low-privileged attacker with network access via HTTP to compromise the system. The...
PT-2026-77107
Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...
PT-2026-77087
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
PT-2026-77098
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
PT-2026-77097
Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...
PT-2026-77099
Unauthenticated Cross Site Scripting XSS in Recipe Card Blocks for Gutenberg & Elementor = 3.4.18 versions...
PT-2026-77996
Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An unauthenticated attacker with network access via HTTP can compromise the Experience Manager component. This issue requires human interaction from ...
PT-2026-77217
Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...
PT-2026-77760
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Hyperion Financial Reporting Server. This issue requires human interaction from a person...
PT-2026-77443
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Scripting product. A low privileged attacker with network access via HTTP can exploit this...
VulnCheck KEV: CVE-2026-66629
Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...
PT-2026-76885
Name of the Vulnerable Software and Affected Versions Webkul Bagisto versions prior to 2.4.5 Description A flaw in the Customer-Registration Notification Email component allows remote attackers to perform basic cross site scripting XSS, a technique where malicious scripts are injected into truste...
PT-2026-77596
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. This...
PT-2026-76924
Name of the Vulnerable Software and Affected Versions Grav Form Plugin versions prior to 9.1.19 Description Field-definition properties in form templates, including prepend, append, spacer text, section text, and select option labels, are not properly escaped. This allows attackers with form...
PT-2026-77083
Name of the Vulnerable Software and Affected Versions WPDM – Premium Packages versions prior to 7.0.6 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...
CVE-2026-73393: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...
PT-2026-77492
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the...