Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.8The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing use…EPSS 0.3%Sep 23, 2026
- Medium5.1UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfig…EPSS 0.2%Sep 21, 2026
- Low3.5The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per…EPSS 0.1%Sep 19, 2026
- Medium6.1A flaw was found in the Quarkus Qute template engine.Sep 18, 2026
- High8.6Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages.EPSS 0.3%Sep 18, 2026
- Medium6.1IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting.EPSS 0.2%Sep 18, 2026
- Medium4.4The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 12.0.6 via the Assignment Engine fields.EPSS 0.2%Sep 18, 2026
- Medium6.4The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all versions up to, and including, 1.5.1 due to ins…EPSS 0.2%Sep 18, 2026
- High7.1The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unau…EPSS 0.2%Sep 17, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScr…EPSS 0.2%Sep 14, 2026
- Low1.8Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor.EPSS 0.3%Sep 13, 2026
- Low3.5The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it,…EPSS 0.1%Sep 11, 2026
- High8.1A flaw was found in FreeIPA.EPSS 0.4%Sep 9, 2026
- Low1.1CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)EPSS 0.3%Sep 9, 2026
- Medium5.3MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scripts.EPSS 0.3%Sep 3, 2026
- Critical9.3Trilium is an open-source hierarchical note-taking application.EPSS 0.3%Aug 27, 2026
- Critical9.3Trilium is an open-source hierarchical note-taking application.EPSS 0.3%Aug 27, 2026
- Critical9.3Trilium is an open-source hierarchical note-taking application.EPSS 0.3%Aug 27, 2026
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allow…EPSS 0.4%Aug 24, 2026
- High8.8RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view.EPSS 0.4%Aug 24, 2026
- Low1.3A vulnerability has been found in Piwigo 16.3.0.EPSS 0.7%Aug 24, 2026
- Medium4.6Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites.EPSS 0.2%Aug 21, 2026
- Medium6.2Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashb…EPSS 0.5%Aug 21, 2026
- High8.2YOURLS is a self-hosted, customizable URL shortener written in PHP.EPSS 0.4%Aug 21, 2026
- High8.6Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - J2Commerce 4.1.5 is vulnerable to Stored Cross-Si…EPSS 0.5%Aug 21, 2026