Lucene search
+L

1135037 matches found

RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-15920

A flaw was found in Django. The django.contrib.admin.utils.displayforfield function renders URLField values as clickable links in the administrative interface without proper validation. If an application persists URLField data containing an unsafe scheme without running model validation, a remote...

6.1CVSS5.6AI score
SaveExploits0References10
NVD
NVD
added yesterday9 views

CVE-2026-70588

Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1...

5CVSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added yesterday8 views

Ghost: Cross-Site Scripting in Universal Import

Impact The Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. Vulnerable versions This vulnerability is present in Ghost from v5.26.0 up to v6.54.0. Patches v6.54.1 contains a fix for this issue. How to update For self-hosters...

5CVSS5.6AI score
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added yesterday7 views

NPM: Ghost: Cross-Site Scripting in Universal Import

NPM: Ghost: Cross-Site Scripting in Universal Import vulnerability discovered by ? in WordPress Npm ghost versions = 5.26.0, 6.54.1...

5CVSS5.4AI score
SaveExploits0References5Affected Software1
CVE
CVE
added yesterday13 views

CVE-2026-70588

CVE-2026-70588 affects the Ghost CMS (Node.js). From 5.26.0 through 6.54.1, the Universal Import feature in Ghost Admin did not properly sanitize imported content, causing an XSS in post content. The issue has been fixed in version 6.54.1. Affected versions should upgrade to 6.54.1 or later to re...

5CVSS5.4AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added yesterday4 views

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the...

8.7CVSS5.6AI score
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added yesterday36 views

CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. Th...

8.7CVSS
SaveExploits0References4
CVE
CVE
added yesterday22 views

CVE-2026-65986

CVE-2026-65986 affects CVAT, an open source video/image annotation tool. The vulnerability is an stored XSS that can be triggered via annotation guide assets and arises when CVAT serves files attached to an annotation guide, incorrectly labeling them with a controllable Content-Type. This causes ...

8.5CVSS5.4AI score
SaveExploits0References2
Cvelist
Cvelist
added yesterday31 views

CVE-2026-65986 CVAT has stored XSS via annotation guide assets

CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annotation guide assets. When CVAT serves the files attached to an annotation guide, it labels them with a media type...

8.5CVSS
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-52869

SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3...

5CVSS5.7AI score
SaveExploits0References4
Patchstack
Patchstack
added yesterday4 views

WordPress DTX – Dynamic Text Extension for Contact Form 7 plugin <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability

Authenticated Editor+ Stored Cross-Site Scripting vulnerability discovered by SATYARTH PRAKASH XoxoL33t in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 5.0.5...

4.4CVSS5.4AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added yesterday7 views

WordPress Super Progressive Web Apps plugin <= 2.2.43 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by lucsob in WordPress Plugin Super Progressive Web Apps versions = 2.2.43...

4.4CVSS5.4AI score
SaveExploits0References1Affected Software1
NVD
NVD
added yesterday8 views

CVE-2026-15920

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

6.1CVSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
added yesterday5 views

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)

Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by cross-site scripting and deserialization vulnerabilities CVE-2026-14974, CVE-2026-14515. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

9.8CVSS5.4AI score0.00366EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added yesterday4 views

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)

Summary IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by cross-site scripting and deserialization vulnerabilities CVE-2026-14974, CVE-2026-14515. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

9.8CVSS5.4AI score0.00366EPSS
SaveExploits0Affected Software1
NVD
NVD
added yesterday7 views

CVE-2026-10032

The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary...

8.6CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday7 views

EUVD-2026-52750

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

6.1CVSS5.2AI score
SaveExploits0References7
Cvelist
Cvelist
added yesterday32 views

CVE-2026-15920 Potential cross-site scripting via URLField values in the admin

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

6.1CVSS
SaveExploits0References7
CVE
CVE
added yesterday12 views

CVE-2026-15920

Django 5.2 before 5.2.17 and 6.0 before 6.0.8 are affected by a cross-site scripting issue in django.contrib.admin.utils.display_for_field() that renders URLField values as clickable links without validating the URL. If an unsafe URL is already stored (e.g., via direct queryset writes, deserializ...

6.1CVSS5.2AI score
SaveExploits0References7
CVE
CVE
added yesterday12 views

CVE-2026-10032

The CVE-2026-10032 issue involves the openUrl function in @a2ui/web_core, which passes an agent-controlled URL directly to window.open() without URI scheme validation. A malicious actor can supply a javascript: URI as the url argument for a Button component’s functionCall action, allowing arbitra...

8.6CVSS5.6AI score
SaveExploits0References1
Rows per page
Query Builder