Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability has been found in code-projects Simple ChatBox up to 1.0.Check if you run itEPSS 0.45%Apr 13, 2026
- Medium6.3Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browserCheck if you run itEPSS 0.23%Apr 13, 2026
- Low2.1A vulnerability has been found in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.45%Apr 13, 2026
- Medium5.1MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter.Check if you run itEPSS 0.27%Apr 12, 2026
- Medium6.1A Cross-site Scripting (XSS) vulnerability was identified in the method of the class in parisneo/lollms prior to version 2.2.0.Check if you run itEPSS 0.26%Apr 12, 2026
- Medium5.1A flaw has been found in 1Panel-dev MaxKB up to 2.6.1.Check if you run itEPSS 0.36%Apr 12, 2026
- Low2.0A vulnerability was detected in 1Panel-dev MaxKB up to 2.2.1.Check if you run itEPSS 0.36%Apr 11, 2026
- Critical9.3A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6.4 and earlier in the Zadarma telephony API endpoint (/api/tel/zadarma.php).Check if you run itEPSS 0.48%Apr 11, 2026
- Medium6.5Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.Check if you run itEPSS 0.25%Apr 11, 2026
- Medium6.1The Optimole – Optimize Images in Real Time plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL paths in versions up to, and including, 4.2.3…Check if you run itEPSS 0.45%Apr 11, 2026
- High7.2The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all ve…Check if you run itEPSS 0.42%Apr 11, 2026
- Medium6.4The GreenShift - Animation and Page Builder Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 12.8.9 This is d…Check if you run itEPSS 0.35%Apr 11, 2026
- Medium6.4The BlockArt Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'clientId' block attribute in all versions up to, and including, 2.2.15.Check if you run itEPSS 0.33%Apr 11, 2026
- Medium5.4Chamilo LMS is a learning management system.Check if you run itEPSS 0.24%Apr 10, 2026
- Medium5.4Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.31%Apr 10, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zootemplate Cerato cerato allows Reflected XSS.This issue affects…Check if you run itEPSS 0.20%Apr 10, 2026
- Low2.1A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.45%Apr 10, 2026
- Low2.1A flaw has been found in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.45%Apr 10, 2026
- Low2.1A vulnerability was found in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.45%Apr 10, 2026
- Medium5.4OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which…Check if you run itEPSS 0.30%Apr 10, 2026
- Critical9.6A Stored Cross-Site Scripting (XSS) vulnerability was identified in the social feature of parisneo/lollms, affecting the latest version prior to 2.2.0.Check if you run itEPSS 1.26%Apr 10, 2026
- Medium6.4The AddFunc Head & Footer Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the , , and post meta values in all versions up to, and including,…Check if you run itEPSS 0.20%Apr 10, 2026
- Low1.9A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.35%Apr 10, 2026
- Medium6.1The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpr_pending_template' parameter in all versio…Check if you run itEPSS 0.35%Apr 10, 2026
- Medium6.4The Webling plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.9.0 due to insufficient input sanitization, insuf…Check if you run itEPSS 0.28%Apr 10, 2026