Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6An authenticated attacker can persist crafted values in multiple field types and trigger client-side script execution when another user opens the affected document in Desk.Check if you run itEPSS 0.34%Apr 22, 2026
- Medium4.6An authenticated attacker can store a crafted tag value in _user_tags and trigger JavaScript execution when a victim opens the list/report view where tags are rendered.Check if you run itEPSS 0.29%Apr 22, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary…Check if you run itEPSS 0.26%Apr 22, 2026
- Medium5.1Carbon Forum 5.9.0 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript code through the Fo…Check if you run itEPSS 0.20%Apr 22, 2026
- Medium5.1ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encod…Check if you run itEPSS 0.23%Apr 22, 2026
- Medium6.4The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login_link shortcode in all versions up to, and includi…Check if you run itEPSS 0.25%Apr 22, 2026
- Medium6.4The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's block_id attribute in all versions up to, and including, 1.1.3.Check if you run itEPSS 0.24%Apr 22, 2026
- Medium6.4The Simple Random Posts Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'container_right_width' attribute of the 'simple_random_pos…Check if you run itEPSS 0.32%Apr 22, 2026
- Medium6.4The Posts map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' shortcode attribute in all versions up to, and including, 0.1.3 due to i…Check if you run itEPSS 0.33%Apr 22, 2026
- Medium4.4The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' (buzz_comments_avatar_image) setting in all versions u…Check if you run itEPSS 0.30%Apr 22, 2026
- Medium6.4The Zypento Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.32%Apr 22, 2026
- Medium6.4The SlideShowPro SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.0.2 due to ins…Check if you run itEPSS 0.32%Apr 22, 2026
- Medium6.4The Text Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 0.0.1 due to insuf…Check if you run itEPSS 0.32%Apr 22, 2026
- Medium6.4The CI HUB Connector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the shortcode in all versions up to, and including, 1.…Check if you run itEPSS 0.32%Apr 22, 2026
- Medium6.4The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-button' shortcode in all versions up to, and incl…Check if you run itEPSS 0.33%Apr 22, 2026
- Medium4.4The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Permanent keywords' field in all versio…Check if you run itEPSS 0.40%Apr 22, 2026
- Medium6.4The WPMK Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' shortcode attribute in all versions up to and including 1.0.1.Check if you run itEPSS 0.33%Apr 22, 2026
- Medium6.4The Twittee Text Tweet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in all versions up to and including 1.0.8.Check if you run itEPSS 0.33%Apr 22, 2026
- Medium6.4The Switch CTA Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wppw_cta_box' shortcode in all versions up to, and including, 1.1.Check if you run itEPSS 0.41%Apr 22, 2026
- Medium6.4The Easy Social Photos Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wrapper_class' shortcode attribute of the 'my-instagram-feed'…Check if you run itEPSS 0.33%Apr 22, 2026
- Medium6.4The ER Swiffy Insert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [swiffy] shortcode in all versions up to and including 1.0.0.Check if you run itEPSS 0.33%Apr 22, 2026
- Medium6.4The Slider Bootstrap Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'category' and 'template' shortcode attributes in all versions…Check if you run itEPSS 0.43%Apr 22, 2026
- Medium6.4The Quran Live Multilanguage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cheikh' and 'lang' shortcode attributes in all versions up to,…Check if you run itEPSS 0.43%Apr 22, 2026
- Medium4.4The Short Comment Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Minimum Count' settings field in all versions up to and including 2.2.Check if you run itEPSS 0.39%Apr 22, 2026
- Medium4.4The Private WP suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Exceptions' setting in all versions up to, and including, 0.4.1.Check if you run itEPSS 0.30%Apr 22, 2026