Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.4VK Blocks <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Group Block 'linkToPost' FeatureOct 15, 2026
- Medium6.1Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages'Oct 15, 2026
- High7.2Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' ParameterOct 15, 2026
- Medium6.1Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' ParameterOct 15, 2026
- High7.2Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' ParameterOct 15, 2026
- High7.2Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'Oct 15, 2026
- Medium6.4Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile FieldsOct 15, 2026
- Medium6.4Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' AttributeOct 15, 2026
- Medium6.4Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text ContentOct 15, 2026
- High7.2n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File PreviewOct 14, 2026
- High7.0n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss ParameterOct 14, 2026
- Low1.1A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScri…Oct 14, 2026
- Medium4.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Medium6.9Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code.Oct 14, 2026
- Medium5.4lichess.org is the forever free, adless and open source chess server.Oct 14, 2026
- Medium5.1DataEase is an open source data visualization and analysis tool.Oct 14, 2026
- Medium5.1DataEase is an open source data visualization and analysis tool.Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SimplyRETS SimplyRETS Real Estate IDX simply-rets allows Reflecte…Oct 14, 2026
- High7.1WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerabilityOct 14, 2026
- High7.1WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerabilityOct 14, 2026
- High8.0Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module).Oct 14, 2026
- High7.7Discourse is an open-source discussion platform.Oct 14, 2026
- Low3.5Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in…Oct 14, 2026
- Low2.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val param…Oct 14, 2026
- Medium5.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded edit_language GET parameter.Oct 14, 2026
295 records · page 1 of 12
PreviousNext