SolarWinds Observability Self-Hosted Cross-Site Script Vulnerability

SolarWinds Observability Self-Hosted versions 2026.2.3 and earlier have a cross-site scripting vulnerability. This vulnerability stems from a storage-based cross-site scripting flaw. Authorized attackers can inject malicious content or JavaScript, causing other authorized users to display or...

Crocoblock JetElements for Elementor: Cross-site Script Vulnerability

Crocoblock JetElements for Elementor 2.9.2.4 and earlier versions have a cross-site scripting vulnerability. This vulnerability arises from improper input handling during web page generation, which may lead to storage-based cross-site scripting attacks...

activity-log.com WP Sessions Time Monitoring Full Automatic Cross-Site Script Vulnerability

activity-log.com WP Sessions Time Monitoring Full Automatic version 1.1.5 and earlier has a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping for parameters such as action as well as function, plugin, posttype, poststatus, ids,...

WordPress CP Multi View Events Calendar Cross-Site Script Vulnerability

WordPress CP Multi View Events Calendar versions 1.4.42 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the CalendarTitle parameter, which may lead to storage-based cross-site scripting attacks. Unverified...

WordPress Salon Booking System Cross-Site Script Vulnerability

The WordPress Salon Booking System versions 10.31.9 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the sln parameter. It may lead to storage-based cross-site scripting attacks. Unverified attackers can injec...

WordPress YITH WooCommerce Compare: Cross-site Script Vulnerability

WordPress YITH WooCommerce Compare 3.15.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation, which may lead to storage-based cross-site scripting attacks...

WordPress IMPress for IDX Broker cross-site scripting vulnerability

WordPress IMPress for IDX Broker 3.3.1 and earlier versions have a cross-site scripting vulnerability. This vulnerability arises from improper input validation during web page generation, which may lead to storage-based cross-site scripting attacks...

[SECURITY] Fedora 45 Update: sbd-1.5.2-7.fc45

This package contains the storage-based death functionality. Available rpmbuild rebuild options: --without : syncresourcestartupdefault...

CVE-2026-77633 Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value through validateUserCapacity and later applies an unconditional storage charge outside the same quota-enforcing transactio...

OpenEMR cross-site scripting vulnerability

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0.1 contained a cross-site...

WordPress Store Locator – WordPress Cross-Site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

Skilja Vinna Process Monitor Cross-Site Script Vulnerability

Skilja Vinna Process Monitor is a business process monitoring platform developed by Skilja Corporation. The Skilja Vinna Process Monitor 4.0 Service Pack 1 version contains a cross-site scripting vulnerability. This vulnerability stems from a storage-based cross-site scripting flaw, which could...

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager is a content management solution developed by Adobe Inc. in the United States. It can be used to build websites, mobile applications, and forms. This solution supports mobile content management, marketing and sales activity management, and multi-site management, among oth...

WordPress plugin Sonaar Music has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

Lyrion Music Server Cross-Site Script Vulnerability

Lyrion Music Server is an audio server software developed by the Lyrion organization. Version 9.2.0 of Lyrion Music Server contains a cross-site scripting vulnerability. This vulnerability stems from an unvalidated storage-based cross-site scripting flaw present in the log viewer, which may allow...

WordPress plugin Passeum Ticketing has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

WordPress plugin Progress Planner has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

JetBrains PyCharm Cross-site Scripting Vulnerabilities

JetBrains PyCharm is an integrated development environment IDE for Python language developed by the Czech company JetBrains. Versions of JetBrains PyCharm prior to 2025.3.4 contained a cross-site scripting vulnerability, which originated from Markdown cells in Jupyter notebooks, where a...

RELATE Cross-Site Scripting Vulnerabilities

RELATE is a web-based course package developed by Andreas Klöckner. RELATE has a cross-site scripting vulnerability. This vulnerability stems from the getuser method in ParticipationAdmin, which uses marksafe for rendering user-controlled inputs, bypassing Django’s HTML escaping. This may lead to...

WordPress plugin Auto Thumbnail has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...