Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.26%Apr 15, 2026
- Medium6.1Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003Check if you run itEPSS 0.25%Apr 15, 2026
- Medium6.1Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001Check if you run itEPSS 0.30%Apr 15, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HashThemes Mini Ajax Cart for WooCommerce allows Stored XSS.This…Check if you run itEPSS 0.24%Apr 15, 2026
- Medium4.8Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrativ…Check if you run itEPSS 0.17%Apr 15, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack again…Check if you run itEPSS 0.19%Apr 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in emarket-design YouTube Showcase youtube-showcase allows Stored XS…Check if you run itEPSS 0.16%Apr 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zahlan Categories Images categories-images allows DOM-Based XSS.T…Check if you run itEPSS 0.22%Apr 15, 2026
- Medium6.4The VI: Include Post By plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class_container' attribute of the 'include-post-by-cat' shortcode in…Check if you run itEPSS 0.32%Apr 15, 2026
- High7.2The Quick Interest Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'loan-amount' and 'loan-period' parameters in all versions up to, a…Check if you run itEPSS 0.39%Apr 15, 2026
- Medium6.4The Power Charts Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [pc] shortcode in all versions up to, and including, 0.1.0.Check if you run itEPSS 0.33%Apr 15, 2026
- Medium6.4The Coachific Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userhash' shortcode attribute in all versions up to and including 1.0.Check if you run itEPSS 0.33%Apr 15, 2026
- Medium6.4The WM JqMath plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' shortcode attribute of the [jqmath] shortcode in all versions up to and…Check if you run itEPSS 0.33%Apr 15, 2026
- Medium6.4The WP Circliful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the [circliful] shortcode and via multiple short…Check if you run itEPSS 0.41%Apr 15, 2026
- High7.2The Accessibly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in all versions up to, and including, 3.0.3.Check if you run itEPSS 0.54%Apr 15, 2026
- High7.1A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter.Check if you run itEPSS 0.29%Apr 15, 2026
- Medium5.1Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation an…Check if you run itEPSS 0.34%Apr 15, 2026
- Medium4.8Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier.Check if you run itEPSS 0.24%Apr 15, 2026
- Medium5.1immich is a high performance self-hosted photo and video management solution.Check if you run itEPSS 0.24%Apr 15, 2026
- High7.2The Age Verification & Identity Verification by Token of Trust plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘description’ parameter in all…Check if you run itEPSS 0.39%Apr 15, 2026
- Medium4.4The List View Google Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the event description in all versions up to, and including, 7.4.3 d…Check if you run itEPSS 0.22%Apr 15, 2026
- Medium5.4Docmost is open-source collaborative wiki and documentation software.Check if you run itEPSS 0.24%Apr 14, 2026
- Medium4.6Docmost is open-source collaborative wiki and documentation software.Check if you run itEPSS 0.23%Apr 14, 2026
- Medium5.1Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.30%Apr 14, 2026
- Medium4.8October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.22%Apr 14, 2026