Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.7The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to…EPSS 0.2%Oct 14, 2026
- High7.2The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including,…EPSS 0.3%Oct 14, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploadi…EPSS 0.2%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability.EPSS 0.4%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…EPSS 0.4%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…EPSS 0.4%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…EPSS 0.4%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…EPSS 0.4%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…EPSS 0.4%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…EPSS 0.4%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…EPSS 0.4%Oct 13, 2026
- Critical9.3Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerab…EPSS 0.7%Oct 13, 2026
- Critical9.3Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerab…EPSS 0.7%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.3%Oct 13, 2026
- High7.2The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 0.3.6.EPSS 0.3%Oct 13, 2026
- High8.6Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of t…EPSS 0.2%Oct 13, 2026