Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.Check if you run itEPSS 0.30%May 1, 2026
- Medium6.4The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta field in versions up to, and including, 4.0.4.Check if you run itEPSS 0.36%May 1, 2026
- Medium6.1Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanit…Check if you run itEPSS 0.28%May 1, 2026
- Low2.0A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6.Check if you run itEPSS 0.35%Apr 30, 2026
- Low2.1SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting m…Check if you run itEPSS 0.29%Apr 30, 2026
- Medium5.4Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attackers to execute arbitrary we…Check if you run itEPSS 0.24%Apr 30, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the /api/blade-desk/notice/submit endpoint of SpringBlade v4.8.0 allows attackers to execute arbitrary web scripts…Check if you run itEPSS 0.33%Apr 30, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite v5.15.1 allows attackers to execute arbitrary web scripts or HTML via i…Check if you run itEPSS 0.26%Apr 30, 2026
- Medium6.1Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code via the detail_produk.php componentCheck if you run itEPSS 0.36%Apr 30, 2026
- Medium6.1Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the produ…Check if you run itEPSS 0.36%Apr 30, 2026
- Medium4.6LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter.Check if you run itEPSS 0.18%Apr 30, 2026
- Low2.1A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0.Check if you run itEPSS 0.45%Apr 29, 2026
- Medium5.1MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines.Check if you run itEPSS 0.26%Apr 29, 2026
- Low2.0A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.33%Apr 29, 2026
- Medium4.8Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic.Check if you run itEPSS 0.26%Apr 29, 2026
- Medium5.1Helpy contains a stored cross-site scripting vulnerability in the post author display logic.Check if you run itEPSS 0.26%Apr 29, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a…Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload int…Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the z…Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via a c…Check if you run itEPSS 0.18%Apr 29, 2026
- High8.0Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file, resulting in a stored cross-site scripting (XSS) vulnerabili…Check if you run itEPSS 0.50%Apr 29, 2026
- Critical9.0Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for…Check if you run itEPSS 0.50%Apr 29, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Reflected XS…Check if you run itEPSS 0.25%Apr 29, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue…Check if you run itEPSS 0.24%Apr 29, 2026
- Medium6.1The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frontend_rewrite' function's 'WPMETEOR[N]WPME…Check if you run itEPSS 0.37%Apr 29, 2026