Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in db_loader.php that allows authenticated attackers to inject arbitrary JavaSc…CVE-2026-48216 · CVE.org · NIST NVDMay 21, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in circle.php that allows authenticated attackers to inject arbitrary JavaScrip…CVE-2026-48215 · CVE.org · NIST NVDMay 21, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_nm.php that allows authenticated attackers to inject arbitrary JavaScrip…CVE-2026-48214 · CVE.org · NIST NVDMay 21, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authenticated attackers to inject arbitrary JavaScript b…CVE-2026-48213 · CVE.org · NIST NVDMay 21, 2026
Medium5.1Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests.CVE-2026-6841 · bestpractical · request tracker · CVE.org · NIST NVDMay 21, 2026
Medium6.4The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all versions up to, and including, 3.15.2 due t…CVE-2026-1543 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 21, 2026
Medium4.9The WPB Floating Menu & Categories for WordPress – Sticky Side Menu with Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Icon CSS Clas…CVE-2026-4811 · CVE.org · NIST NVD · WordPressMay 21, 2026
Medium5.4Mantis Bug Tracker (MantisBT) is an open source issue tracker.CVE-2026-39960 · CVE.org · NIST NVDMay 20, 2026
High8.4Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting vulnerability in the embedded web configuration interface that allows authe…CVE-2026-9144 · CVE.org · NIST NVDMay 20, 2026
Low2.1TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse() function that allows attackers to execute arbitrary JavaScript by delive…CVE-2026-47099 · CVE.org · NIST NVDMay 20, 2026
Medium6.8Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.CVE-2026-39311 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScrip…CVE-2026-35016 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows authenticated attackers to inject arbitrary Jav…CVE-2026-35015 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaSc…CVE-2026-35014 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows authenticated attackers to inject arbitrary Java…CVE-2026-35013 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows authenticated attackers to inject arbitrary Java…CVE-2026-35012 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authenticated attackers to inject arbitrary JavaScript…CVE-2026-35011 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows authenticated attackers to inject arbitrary JavaS…CVE-2026-35010 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows authenticated attackers to inject arbitrary JavaScr…CVE-2026-35009 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authenticated attackers to inject arbitrary JavaScrip…CVE-2026-35008 · CVE.org · NIST NVDMay 20, 2026
Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows authenticated attackers to inject arbitrary Java…CVE-2026-35007 · CVE.org · NIST NVDMay 20, 2026
Medium6.1CryptPad is an end-to-end encrypted collaborative office suite.CVE-2026-26028 · CVE.org · NIST NVDMay 20, 2026
Medium6.1Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file.CVE-2026-30691 · CVE.org · NIST NVDMay 20, 2026
High7.2The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0][cost_of_goods_value]' parameter in versions up…CVE-2026-7613 · CVE.org · NIST NVD · WordPressMay 20, 2026
Medium5.4InfoScale VIOM 9.1.3 allows XSS.CVE-2026-44924 · veritas · infoscale operations manager · CVE.org · NIST NVD · VeritasMay 20, 2026