1045400 matches found
CVE-2026-64972
ATutor's preview.php renders the unsanitized "popup" parameter directly into an HTML attribute, allowing an authenticated attacker to break out of the value and inject an event handler (e.g., onload) for reflected XSS. CVSS 4.0 scores 4.8 (Medium). The product is unsupported and unfixed; version ...
CVE-2026-64972 Reflected XSS in ATutor
ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double quote into the popup parameter, break out of the attribute value, and append a new event handler such as onload. The related previewtop.php file sanitises these parameters, but...
CVE-2026-64971
ATutor's restore functionality allows reflected XSS: a crafted URL triggers arbitrary JavaScript execution in the victim's browser. Only version 2.2.4 is confirmed vulnerable, but the product is no longer actively supported and has no fix, so other versions may also be affected. CVSS 4.0 base sco...
CVE-2026-64971 Reflected XSS in ATutor
ATutor is vulnerable to Reflected XSS in restore functionality. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is no longer actively supported and the vulnerabilities have not been fixed. Only version...
CVE-2026-64970
ATutor 2.2.4 is vulnerable to stored XSS: a user can inject JavaScript into the registration phone field, which is echoed unencoded on the public profile page, executing in any visitor's browser to steal session cookies. The product is no longer actively supported and remains unpatched; no exploi...
CVE-2026-64970 Stored XSS in ATutor
ATutor is vulnerable to Stored Cross Site Scripting in registration functionality. An attacker can register a new account and enter a JavaScript payload in the phone field during registration. When any authenticated user visits the attacker's public profile, the profile template echoes the phone...
CVE-2026-77072
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completion page. The completion page applied its sandboxing Content-Security-Policy only when respondWith was not set to 'redirect', but responseText was always rendered as raw HTML. An...
CVE-2026-68564
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
CVE-2026-73402
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
CVE-2026-66615
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
CVE-2026-66673
Unauthenticated Cross Site Scripting XSS in Flatastic = 2.0 versions...
CVE-2026-66606
Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...
CVE-2026-66607
Unauthenticated Cross Site Scripting XSS in Advance Product Search = 1.4.8 versions...
CVE-2026-66604
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
CVE-2026-66614
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.2 versions...
CVE-2026-66598
Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...
CVE-2026-66597
Unauthenticated Cross Site Scripting XSS in wpDataTables = 6.5.1.4 versions...
CVE-2026-66581
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...