CVE-2026-25352

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup MyDecor mydecor allows Reflected XSS.This issue affects MyDecor: from n/a through 1.5.9...

EUVD-2026-15673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Sanzo sanzo allows Stored XSS.This issue affects Sanzo: from n/a through 2.4.3...

EUVD-2026-15636

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Jaroti jaroti allows Reflected XSS.This issue affects Jaroti: from n/a through 1.4.8...

EUVD-2026-15669

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Nooni nooni allows Reflected XSS.This issue affects Nooni: from n/a through 1.5.1...

EUVD-2026-15666

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup MyMedi mymedi allows Reflected XSS.This issue affects MyMedi: from n/a through 1.7.7...

EUVD-2026-15671

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Reebox reebox allows Reflected XSS.This issue affects Reebox: from n/a through 1.4.8...

EUVD-2026-15664

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Loobek loobek allows Reflected XSS.This issue affects Loobek: from n/a through 1.5.2...

EUVD-2026-15665

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Miti miti allows Reflected XSS.This issue affects Miti: from n/a through 1.5.3...

CVE-2026-25351

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup MyMedi mymedi allows Reflected XSS.This issue affects MyMedi: from n/a through 1.7.7...

PT-2026-27914

Name of the Vulnerable Software and Affected Versions skygroup Nooni versions prior to 1.5.1 Description The software contains a flaw related to improper input handling during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inject malicio...

PT-2026-27916

Name of the Vulnerable Software and Affected Versions skygroup Sanzo versions prior to 2.4.3 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential cross-site scripting XSS issue. Specifically, the vulnerability allo...

PT-2026-27910

Name of the Vulnerable Software and Affected Versions skygroup Loobek versions prior to 1.5.2 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, potentially leading to reflected cross-site scripting XSS. This allows an attacker to inje...

PT-2026-27917

Name of the Vulnerable Software and Affected Versions skygroup Yobazar versions prior to 1.6.7 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This allows an attacker to inject...

PT-2026-27912

Name of the Vulnerable Software and Affected Versions MyMedi versions prior to 1.7.7 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inject malicious...

PT-2026-27895

Name of the Vulnerable Software and Affected Versions Jaroti versions prior to 1.4.8 Description An issue exists in Jaroti that allows for Reflected Cross-Site Scripting XSS. This occurs due to improper handling of user-supplied input during web page generation. The vulnerability allows an attack...

PT-2026-27911

Name of the Vulnerable Software and Affected Versions skygroup Miti versions prior to 1.5.3 Description The software contains a flaw related to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows for the injection of...

PT-2026-27913

Name of the Vulnerable Software and Affected Versions skygroup MyDecor versions prior to 1.5.9 Description A flaw exists in skygroup MyDecor that allows for Reflected Cross-site Scripting XSS. This issue is due to improper handling of user-supplied input when generating web pages. Successful...

EUVD-2025-38138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through 1.6.4...

PT-2025-45257

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through 1.6.4...

EUVD-2025-25372

Malicious code in bioql PyPI...