Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Astro is a web framework.Check if you run itEPSS 0.27%Apr 24, 2026
- Medium4.9Cross Site Scripting vulnerability in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary codeCheck if you run itEPSS 0.86%Apr 24, 2026
- Medium6.1Mahara before 25.04.2 and 24.04.11 are vulnerable to displaying results that can trigger XSS via a malicious search query string.Check if you run itEPSS 0.19%Apr 24, 2026
- Low2.4AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms.Check if you run itEPSS 0.69%Apr 24, 2026
- Medium6.5Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ Web.Check if you run itEPSS 0.72%Apr 24, 2026
- Medium6.4The ITERAS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes (iteras-ordering, iteras-signup, iteras-paywall-login, iteras-self…Check if you run itEPSS 0.43%Apr 24, 2026
- Medium6.4The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image captions in the Image Grid/Slider/Carousel widget in versions up…Check if you run itEPSS 0.35%Apr 24, 2026
- Low1.3Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS).Check if you run itEPSS 0.26%Apr 24, 2026
- Medium5.4AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.27%Apr 24, 2026
- Medium6.1PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.Check if you run itEPSS 0.26%Apr 24, 2026
- Medium5.4Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.24%Apr 24, 2026
- Medium5.4pretalx is a conference planning tool.Check if you run itEPSS 0.27%Apr 23, 2026
- Medium6.0DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.Check if you run itEPSS 0.40%Apr 23, 2026
- Medium6.8DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.Check if you run itEPSS 0.41%Apr 23, 2026
- Medium6.9DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.Check if you run itEPSS 0.35%Apr 23, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc.Check if you run itEPSS 0.22%Apr 23, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affe…Check if you run itEPSS 0.13%Apr 23, 2026
- Low3.5The reCaptcha by WebDesignBy WordPress plugin before 2.0 does not sanitize or escape the Site Key setting before outputting it in a JavaScript string context via the g…Check if you run itEPSS 0.24%Apr 23, 2026
- Medium6.4The WP Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpsl_address' post meta value in versions up to, and including, 2.2.261…Check if you run itEPSS 0.26%Apr 23, 2026
- Medium5.4Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow an attacker to execute arbitrary JavaScript on any user account that has acc…Check if you run itEPSS 0.23%Apr 23, 2026
- Medium5.4The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,…Check if you run itEPSS 0.24%Apr 23, 2026
- High8.5STIG Manager is an API and web client for managing Security Technical Implementation Guides (STIG) assessments of Information Systems.Check if you run itEPSS 0.62%Apr 23, 2026
- Medium6.4The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including…Check if you run itEPSS 0.19%Apr 23, 2026
- Medium4.8IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting.Check if you run itEPSS 0.24%Apr 23, 2026
- Medium4.8IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.24%Apr 23, 2026