Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Finn Dohrn Statify Widget statify-widget allows Stored XSS.This issue affectsCheck this weekEPSS 22.00%Aug 28, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gslauraspeck Mesa Mesa Reservation Widget mesa-mesa-reservation-widget allowsCheck this weekEPSS 23.00%Aug 28, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ItayXD Responsive Mobile-Friendly Tooltip responsive-mobile-friendly-tooltip aCheck this weekEPSS 21.00%Aug 28, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stanton119 WordPress HTML custom-html-bodyhead allows Stored XSS.This issue afCheck this weekEPSS 21.00%Aug 28, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in salubrio Add Code To Head add-code-to-head allows Stored XSS.This issue affectCheck this weekEPSS 22.00%Aug 28, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kevin heath Tripadvisor Shortcode tripadvisor-shortcode allows Stored XSS.ThisCheck this weekEPSS 22.00%Aug 28, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 文派翻译（WP Chinese Translation） WPAvatar wpavatar allows Stored XSS.This issue afCheck this weekEPSS 21.00%Aug 28, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vikingjs Goal Tracker for Patreon goal-tracker-for-patreon allows Stored XSS.TCheck this weekEPSS 22.00%Aug 28, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mibuthu Link View link-view allows Stored XSS.This issue affects Link View: frCheck this weekEPSS 21.00%Aug 28, 2025
- Medium5.1QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality.Open the advisoryAug 28, 2025
- Medium5.3QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality.Open the advisoryAug 28, 2025
- Medium5.3QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality.Open the advisoryAug 28, 2025
- Medium5.1QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality.Open the advisoryAug 28, 2025
- Medium6.4The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.148 due to insuCheck this weekEPSS 24.00%Aug 28, 2025
- Medium6.4The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugCheck this weekEPSS 24.00%Aug 28, 2025
- Medium6.1The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'fl_builder' parameter in all versions up to, and includinCheck this weekEPSS 22.00%Aug 28, 2025
- Medium5.4The Pronamic Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field in all versions up to, and including, 2.4.1 due to insufficientCheck this weekEPSS 24.00%Aug 28, 2025
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityPatch nowKEVEPSS 1.71%Jun 23, 2025
- Medium5.2A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connectCheck if you run itEPSS 0.53%Jun 2, 2025
- Medium5.4Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityPatch nowKEVEPSS 4.06%Mar 12, 2025
- Medium5.4A flaw was found in npm-serialize-javascript.Check if you run itEPSS 1.12%Feb 10, 2025
- Medium6.3Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 22.59%Nov 19, 2024
- Medium5.3MDaemon Email Server Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 31.36%Nov 15, 2024
- High8.1Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 46.11%Oct 8, 2024
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 24.61%Aug 12, 2024