Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3SpecifyJS is a declarative TypeScript user interface framework.EPSS 0.5%Aug 21, 2026
- High7.3Combodo iTop is a web based IT service management tool.EPSS 0.4%Aug 21, 2026
- Medium5.3Element Web is a Matrix web client built using the Matrix React SDK.EPSS 0.5%Aug 21, 2026
- High8.2DiscordChatExporter saves Discord chat logs to a file.EPSS 0.2%Aug 21, 2026
- Medium4.1DiscordChatExporter saves Discord chat logs to a file.EPSS 0.2%Aug 21, 2026
- High8.5Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option.Aug 21, 2026
- Medium5.3Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66Aug 21, 2026
- High8.6Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66 - User supplied input in comments and user supplied field eleme…Aug 21, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden WPDM – Premium Packages wpdm-premium-packages allows DOM-…EPSS 0.3%Aug 18, 2026
- High7.2The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_id' parameter in al…EPSS 0.4%Aug 15, 2026
- High8.2OmniFaces is a utility library for Faces.EPSS 0.3%Jul 24, 2026
- Medium6.4The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via…EPSS 0.2%Jun 10, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection.EPSS 0.1%May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.EPSS 0.3%May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.EPSS 0.3%May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.EPSS 0.2%May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.EPSS 0.3%May 28, 2026
- Medium5.5Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers a…EPSS 0.3%May 27, 2026
- High8.2IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS).EPSS 0.3%May 27, 2026
- Medium5.1Prometheus is an open-source monitoring system and time series database.May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.May 26, 2026
- Medium5.3Mistune is a Python Markdown parser with renderers and plugins.May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.May 26, 2026