Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PlayerJS PlayerJS playerjs allows DOM-Based XSS.This issue affect…Open the advisorySep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Photo Gallery by Ays gallery-photo-gallery allows DOM-Bas…Open the advisorySep 22, 2025
- Low1.9A security vulnerability has been detected in htmly up to 3.1.0.Check if you run itEPSS 0.30%Sep 21, 2025
- Low2.1A vulnerability has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831.Check if you run itEPSS 0.44%Sep 19, 2025
- Low2.1A flaw has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831.Check if you run itEPSS 0.44%Sep 19, 2025
- Medium5.4SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.Open the advisorySep 19, 2025
- Medium5.4n8n is an open source workflow automation platform.Open the advisorySep 15, 2025
- Low1.9A vulnerability was identified in IbuyuCMS up to 2.6.3.Check if you run itEPSS 0.27%Sep 15, 2025
- Low2.0A vulnerability has been found in openDCIM 23.04.Check if you run itEPSS 0.33%Sep 11, 2025
- Medium6.4The Evenium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'evenium_single_event' shortcode in all versions up to, and including, 1.3.11 due toCheck this weekEPSS 20.00%Sep 11, 2025
- Low1.3Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin.Open the advisorySep 11, 2025
- Low1.9A flaw has been found in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.30%Sep 11, 2025
- Low1.9A vulnerability was detected in Scada-LTS up to 2.7.8.1.Check if you run itEPSS 0.30%Sep 11, 2025
- Low2.0A weakness has been identified in SourceCodester Simple To-Do List System 1.0.Check if you run itEPSS 0.32%Sep 9, 2025
- Medium4.8A weakness has been identified in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.34%Sep 8, 2025
- Medium5.1Cross-site Scripting (XSS) vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input…Open the advisorySep 8, 2025
- Medium5.1A vulnerability was identified in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.34%Sep 8, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in givecloud Donation Forms WP by Givecloud donation-forms-by-givecl…Open the advisorySep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PriceListo Best Restaurant Menu by PriceListo best-restaurant-menu-by-pricelisCheck this weekEPSS 21.00%Sep 5, 2025
- Medium4.8SummaryA Cross-Site Scripting (XSS) vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session.Open the advisorySep 3, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Store…Open the advisorySep 3, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Delicious WP Delicious delicious-recipes allows Stored XSS.This issue affecCheck this weekEPSS 21.00%Sep 3, 2025
- Medium6.8Outline is a service that allows for collaborative documentation.Open the advisorySep 3, 2025
- Low2.1A flaw has been found in RemoteClinic up to 2.0.Open the advisorySep 1, 2025
- Medium5.1A vulnerability was detected in O2OA up to 10.0-410.Check this weekEPSS 33.00%Aug 31, 2025