Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding.Check if you run itEPSS 0.17%Apr 29, 2026
- High7.2GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.Check if you run itEPSS 0.37%Apr 29, 2026
- Low1.9A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.35%Apr 28, 2026
- Low1.9A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.35%Apr 28, 2026
- Medium6.1A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript…Check if you run itEPSS 0.44%Apr 28, 2026
- Low1.9A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.35%Apr 28, 2026
- Low1.9A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.35%Apr 28, 2026
- High8.9Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.4Cross-Site Scripting (XSS) vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality.Check if you run itEPSS 0.29%Apr 28, 2026
- Low1.9A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.35%Apr 28, 2026
- Low1.9A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Apr 28, 2026
- Medium6.4The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.0 This is due to insufficient input sanitization a…Check if you run itEPSS 0.35%Apr 28, 2026
- Low2.1A vulnerability was found in SourceCodester Safety Anger Pad 1.0.Check if you run itEPSS 0.45%Apr 28, 2026
- Medium6.4The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.35%Apr 28, 2026
- Medium6.4The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the shortcode in all versions up t…Check if you run itEPSS 0.33%Apr 28, 2026
- Medium6.4The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blo…Check if you run itEPSS 0.35%Apr 28, 2026
- Low2.0A vulnerability was determined in code-projects Coaching Management System 1.0.Check if you run itEPSS 0.33%Apr 28, 2026
- Low2.1A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.45%Apr 28, 2026
- Medium4.8An authenticated attacker with permission to edit document content can store crafted HTML/JavaScript in a Document embed editable and cause script execution when the p…Check if you run itEPSS 0.29%Apr 27, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0.Check if you run itEPSS 0.36%Apr 27, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/selectindices.php via the namecontains parameterCheck if you run itEPSS 0.25%Apr 27, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/view.php via the doctype parameterCheck if you run itEPSS 0.25%Apr 27, 2026
- Medium5.1ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the file upload functionality where the checkValidFileName() function fail…Check if you run itEPSS 0.30%Apr 27, 2026
- Medium5.1ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText() function within Security.php that fails to proper…Check if you run itEPSS 0.32%Apr 27, 2026
- Low2.1A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.45%Apr 27, 2026