Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.1In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application.EPSS 0.3%May 8, 2026
- High8.7Brave CMS is an open-source CMS.EPSS 0.4%May 8, 2026
- Medium6.4The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the shortcode in all versions up…EPSS 0.3%May 8, 2026
- Medium6.4The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom post type in all versions up to, and including, 3.3.2.EPSS 0.3%May 8, 2026
- Medium6.4The NMR Strava activities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.0.14 due…EPSS 0.3%May 8, 2026
- High7.2The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This is due to insufficient input sa…EPSS 0.5%May 8, 2026
- Medium5.4SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.EPSS 0.6%May 8, 2026
- Medium6.1A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp.EPSS 0.1%May 8, 2026
- Medium6.1A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type.EPSS 0.6%May 8, 2026
- Low1.9A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.EPSS 0.4%May 8, 2026
- Medium4.8wlc is a Weblate command-line client using Weblate's REST API.EPSS 0.3%May 8, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.EPSS 0.4%May 8, 2026
- Medium5.9A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft.EPSS 0.3%May 7, 2026
- Medium5.1Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute ar…EPSS 0.3%May 7, 2026
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.EPSS 0.5%May 7, 2026
- Medium4.7i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.EPSS 0.2%May 7, 2026
- Medium6.1CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute.EPSS 0.3%May 7, 2026
- High7.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.EPSS 0.3%May 7, 2026
- High7.0BentoPDF is a client-side PDF toolkit that is self hostable.EPSS 0.5%May 7, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page.EPSS 0.2%May 7, 2026
- Medium5.4Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5.EPSS 0.3%May 7, 2026
- Medium6.1Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL being rended from cron.erb.EPSS 0.2%May 7, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricks Builder allows Reflected XSS.EPSS 0.3%May 7, 2026
- High8.8Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc.EPSS 0.4%May 7, 2026
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in misp allows Stored XSS.EPSS 0.2%May 7, 2026