Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium5.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject scri…Check if you run itEPSS 0.21%Apr 9, 2026
- Medium5.1Joomla HikaShop 4.7.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating GET par…Check if you run itEPSS 0.23%Apr 9, 2026
- Medium5.1Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating multip…Check if you run itEPSS 0.23%Apr 9, 2026
- Medium5.1Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the ke…Check if you run itEPSS 0.19%Apr 9, 2026
- Medium5.1Joomla iProperty Real Estate 4.1.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the filter…Check if you run itEPSS 0.22%Apr 9, 2026
- Medium5.1Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the review_id URL parameter.Check if you run itEPSS 0.19%Apr 9, 2026
- Medium5.1WordPress adivaha Travel Plugin 2.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipu…Check if you run itEPSS 0.26%Apr 9, 2026
- Medium6.1Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters.Check if you run itEPSS 0.28%Apr 9, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in…Check if you run itEPSS 0.23%Apr 9, 2026
- Medium5.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.39%Apr 9, 2026
- Medium5.4A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improper output encoding of user-supplied input in administrative interfaces.Check if you run itEPSS 0.13%Apr 9, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.Check if you run itEPSS 0.24%Apr 9, 2026
- Medium6.4The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.…Check if you run itEPSS 0.32%Apr 9, 2026
- Medium6.4The UsersWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.2.60.Check if you run itEPSS 0.42%Apr 9, 2026
- Medium6.4The Ultimate FAQ Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via FAQ content in all versions up to, and including, 2.4.7.Check if you run itEPSS 0.38%Apr 9, 2026
- Low1.9A vulnerability has been found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.35%Apr 9, 2026
- Low1.9A flaw has been found in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.35%Apr 9, 2026
- Low1.9A vulnerability was detected in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.35%Apr 9, 2026
- Medium6.4The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sid' parameter of the 'wpdm_members' shortcode in versions up to and in…Check if you run itEPSS 0.35%Apr 9, 2026
- Medium6.4The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_name' and 'file_color_list' shortcode attribute of the [osm_m…Check if you run itEPSS 0.42%Apr 9, 2026
- Medium4.4The Experto Dashboard for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings fields (including 'Navigation Font Si…Check if you run itEPSS 0.33%Apr 9, 2026
- Low2.1A flaw has been found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.45%Apr 9, 2026
- Low2.1A vulnerability was detected in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.45%Apr 9, 2026
- Medium5.1A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execut…Check if you run itEPSS 0.61%Apr 8, 2026