Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.6.Check if you run itEPSS 0.29%Apr 21, 2026
- High8.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.43%Apr 21, 2026
- Medium4.7The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to,…Check if you run itEPSS 0.24%Apr 20, 2026
- Medium6.4The Image Source Control Lite – Show Image Credits and Captions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Image Source' attachment fie…Check if you run itEPSS 0.26%Apr 20, 2026
- Medium5.4Cross Site Scripting vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the visname parameter of visitors-form.php.Check if you run itEPSS 0.29%Apr 20, 2026
- Medium6.4GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the ticket subject field that allows authenticated staff members to inject malicious…Check if you run itEPSS 0.15%Apr 20, 2026
- Medium5.1GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter is passed directly to SWIFT_Report::Cr…Check if you run itEPSS 0.14%Apr 20, 2026
- Medium5.1GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in Contr…Check if you run itEPSS 0.14%Apr 20, 2026
- Medium4.8GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the language management functionality where the charset POST parameter is passed dir…Check if you run itEPSS 0.15%Apr 20, 2026
- Medium4.8GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the template group creation and editing functionality that allows authenticated admi…Check if you run itEPSS 0.15%Apr 20, 2026
- Low1.9A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0.Check if you run itEPSS 0.35%Apr 20, 2026
- Medium5.1Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media upload and rename permissions to execute arbitra…Check if you run itEPSS 0.48%Apr 20, 2026
- Low2.0A vulnerability was found in Qibo CMS 1.0.Check if you run itEPSS 0.33%Apr 20, 2026
- Low2.0A security flaw has been discovered in Yifang CMS up to 2.0.5.Check if you run itEPSS 0.33%Apr 20, 2026
- Low1.9A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20.Check if you run itEPSS 0.35%Apr 20, 2026
- Medium4.8A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20.Check if you run itEPSS 0.35%Apr 20, 2026
- Low1.9A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20.Check if you run itEPSS 0.35%Apr 20, 2026
- Low2.0A vulnerability has been found in langgenius dify up to 1.13.3.Check if you run itEPSS 0.33%Apr 20, 2026
- Low3.5The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stor…Check if you run itEPSS 0.21%Apr 20, 2026
- Low2.0A flaw has been found in langflow-ai langflow up to 1.8.3.Check if you run itEPSS 0.33%Apr 20, 2026
- Medium5.1SD-330AC and AMC Manager provided by silex technology, Inc.Check if you run itEPSS 0.27%Apr 20, 2026
- Low2.0A vulnerability was found in ComfyUI up to 0.13.0.Check if you run itEPSS 0.33%Apr 20, 2026
- Low2.0A vulnerability has been found in ComfyUI up to 0.13.0.Check if you run itEPSS 0.40%Apr 20, 2026
- Medium5.3A weakness has been identified in Wavlink WL-WN579A3 220323.Check if you run itEPSS 0.45%Apr 19, 2026
- Medium6.4The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's calendly shortcode in all versio…Check if you run itEPSS 0.19%Apr 19, 2026