Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.1ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submittin…EPSS 0.2%Oct 13, 2026
- Medium5.3Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-contro…EPSS 0.3%Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to persist unneutralized markup by subm…EPSS 0.3%Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting a…EPSS 0.2%Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML attribute…EPSS 0.3%Oct 13, 2026
- Medium5.4Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue wher…EPSS 0.2%Oct 13, 2026
- High8.1Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing…EPSS 0.4%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkEPSS 0.4%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkEPSS 0.3%Oct 13, 2026
- High7.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…EPSS 0.6%Oct 13, 2026
- Critical9.3Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscr…Oct 13, 2026
- Critical9.4Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.EPSS 0.4%Oct 13, 2026
- Medium5.4HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspec…EPSS 0.2%Oct 13, 2026
- High7.2The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '…EPSS 0.2%Oct 13, 2026
- Medium5.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.EPSS 0.2%Oct 13, 2026
- High8.5Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile field that is rendered without escaping into portal pages.Oct 12, 2026
- Medium5.3Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability in a public portal form that accepts unauthenticated submis…EPSS 0.2%Oct 12, 2026
- Medium5.1Frappe ERPNext 16.x before 16.27.0 contains a stored cross-site scripting vulnerability that allows users with edit rights to inject script through a record name rende…EPSS 0.2%Oct 12, 2026
- Low1.9A security vulnerability has been detected in Edimax BR-6208AC 1.32.EPSS 0.2%Oct 12, 2026
- Low1.9A weakness has been identified in Edimax BR-6208AC 1.32.Oct 12, 2026
- High8.6Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to missing input validation on a certain page, allowi…EPSS 0.3%Oct 12, 2026
- Low2.1A vulnerability was determined in Netcore NR268 1.7.121109.EPSS 0.3%Oct 12, 2026
- High8.4EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles.Oct 12, 2026
- Low2.1A vulnerability was found in Netcore NR268 1.7.121109.EPSS 0.3%Oct 12, 2026