1138315 matches found
PT-2026-49222
WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings and inject persistent cross-site scripting payloads through the admin.php page parameters. Attackers can inject malicious JavaScrip...
PT-2026-49465
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.7.2 versions...
PT-2026-49366
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.14.2 versions...
PT-2026-49565
Name of the Vulnerable Software and Affected Versions Angular versions prior to 22.0.0-rc.2 Angular versions prior to 21.2.16 Angular versions prior to 20.3.24 Angular versions prior to 19.2.25 Description A Cross-Site Scripting XSS issue exists in the domino DOM emulation dependency of...
PT-2026-49354
Unauthenticated Cross Site Scripting XSS in Redirection for Contact Form 7 = 3.2.8 versions...
PT-2026-49414
Unauthenticated Cross Site Scripting XSS in Coupon Affiliates = 7.5.3 versions...
PT-2026-49483
Unauthenticated Cross Site Scripting XSS in Stop Spammers = 2026.3 versions...
PT-2026-49559
Name of the Vulnerable Software and Affected Versions DOMPurify affected versions not specified Description An issue exists where the sanitizer skips the contents of a shadow DOM attached to an element inside a element. This allows malicious payloads, such as images with onerror handlers, links...
CVE-2026-36521
PublicCMS V5.202506.d has a Cross Site Scripting XSS vulnerability in the site configuration management module...
PT-2026-49460
Subscriber Cross Site Scripting XSS in EventPrime = 4.3.2.1 versions...
PT-2026-49368
Name of the Vulnerable Software and Affected Versions WooCommerce Product Table Lite versions prior to 4.6.4 Description Unauthenticated stored Cross Site Scripting XSS, a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users, exists in the software...
PT-2026-49476
Name of the Vulnerable Software and Affected Versions Quiz And Survey Master versions prior to 11.1.3 Description Unauthenticated Cross Site Scripting XSS exists in the software, allowing an attacker to execute malicious scripts in the victim's browser without requiring authentication...
PT-2026-49350
Unauthenticated Cross Site Scripting XSS in iRobots.txt SEO = 1.1.2 versions...
PT-2026-49186
The Form Builder CP WordPress plugin before 1.2.47 does not properly sanitize a form configuration value before storing it and using it as part of a client-side script execution, allowing authenticated users with Editor-level access and above to perform Stored Cross-Site Scripting attacks against...
PT-2026-49485
Name of the Vulnerable Software and Affected Versions WP Job Portal versions prior to 2.5.3 Description Cross Site Scripting XSS exists in the plugin, allowing users with the Subscriber role to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than...
PT-2026-49489
Unauthenticated Cross Site Scripting XSS in HollerBox = 2.3.10.1 versions...
PT-2026-49392
Unauthenticated Cross Site Scripting XSS in Paid Member Subscriptions = 2.17.3 versions...
PT-2026-49498
Unauthenticated Cross Site Scripting XSS in Drag and Drop Multiple File Upload – Contact Form 7 = 1.3.9.7 versions...
PT-2026-49495
Name of the Vulnerable Software and Affected Versions Funnel Builder by FunnelKit versions prior to 3.15.0.3 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the victim's browser without requiring authentication. Recommendations Update to a...