Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.1CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject arbitrary web script or HTML via crafted inpu…EPSS 0.2%May 10, 2026
- Medium5.1Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter.EPSS 0.3%May 10, 2026
- Medium5.1Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter.EPSS 0.2%May 10, 2026
- Medium5.1AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering JavaScr…EPSS 0.2%May 10, 2026
- Medium5.1Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code th…EPSS 0.2%May 10, 2026
- High7.3In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to co…EPSS 0.3%May 10, 2026
- Low1.9A flaw has been found in Devs Palace ERP Online up to 4.0.0.EPSS 0.4%May 10, 2026
- Low1.9A vulnerability was detected in Devs Palace ERP Online up to 4.0.0.EPSS 0.4%May 10, 2026
- Low1.9A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0.EPSS 0.4%May 10, 2026
- Low1.9A weakness has been identified in Devs Palace ERP Online up to 4.0.0.EPSS 0.4%May 10, 2026
- Low2.1A vulnerability was detected in JeecgBoot up to 3.9.1.EPSS 0.4%May 9, 2026
- High8.8Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages.EPSS 0.6%May 9, 2026
- Critical9.0Postiz is an AI social media scheduling tool.EPSS 0.4%May 8, 2026
- Medium6.3Grimmory is a self-hosted digital library.EPSS 0.1%May 8, 2026
- High7.6ipl/web is a set of common web components for php projects.EPSS 0.5%May 8, 2026
- Medium5.4Plunk is an open-source email platform built on top of AWS SES.EPSS 0.2%May 8, 2026
- Low2.3Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface.EPSS 0.4%May 8, 2026
- High7.5locize is a localization platform that connects code and i18n setup.EPSS 0.1%May 8, 2026
- High8.6i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno.EPSS 0.4%May 8, 2026
- Medium6.4Marko is a declarative, HTML-based language for building web apps.EPSS 0.3%May 8, 2026
- High7.1Brave CMS is an open-source CMS.EPSS 0.4%May 8, 2026
- Medium6.1In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application.EPSS 0.3%May 8, 2026
- High8.7Brave CMS is an open-source CMS.EPSS 0.4%May 8, 2026
- Medium6.4The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the shortcode in all versions up…EPSS 0.3%May 8, 2026
- Medium6.4The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom post type in all versions up to, and including, 3.3.2.EPSS 0.3%May 8, 2026