Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markbeljaars Table of Contents Creator allows Reflected XSS.This…Check if you run itEPSS 0.15%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ArtstudioWorks Brookside allows Reflected XSS.This issue affects…Check if you run itEPSS 0.20%Mar 19, 2026
- Medium6.5Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPSight WPCasa allows DOM-Based XSS.This issue affects WPCasa: fr…Check if you run itEPSS 0.13%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Reflected XSS…Check if you run itEPSS 0.20%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Reflected XSS.This issu…Check if you run itEPSS 0.15%Mar 19, 2026
- Medium5.4A Stored cross-site scripting (XSS) vulnerability affects HCL Unica Marketing Operations v12.1.8 and lower.Check if you run itEPSS 0.18%Mar 19, 2026
- Medium6.4The Info Cards – Add Text and Media in Card Layouts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnUrl' parameter within the Info Cards…Check if you run itEPSS 0.37%Mar 19, 2026
- Medium6.4The Simple Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' post meta (Custom Field) in all versions up to and including 2.6.2.Check if you run itEPSS 0.36%Mar 19, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue aff…Check if you run itEPSS 0.26%Mar 19, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media WP Rocket allows Stored XSS.This issue affects WP Rocket…Check if you run itEPSS 0.25%Mar 19, 2026
- High7.2The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fh' (fingerprint) parameter in all versions up to, and including, 5.3…Check if you run itEPSS 0.33%Mar 19, 2026
- Medium5.4IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting.Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.4IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting.Check if you run itEPSS 0.14%Mar 19, 2026
- High8.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.38%Mar 18, 2026
- Medium6.1Memray is a memory profiler for Python.Check if you run itEPSS 0.36%Mar 18, 2026
- Medium5.4OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.33%Mar 18, 2026
- Medium5.4A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4.Check if you run itEPSS 0.31%Mar 18, 2026
- Critical9.8An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.Check if you run itEPSS 0.81%Mar 18, 2026
- Medium6.1A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7,…Check if you run itEPSS 0.26%Mar 18, 2026
- High7.2The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.41%Mar 18, 2026
- Medium6.4The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all versions up to, and including, 2.5.1.Check if you run itEPSS 0.21%Mar 18, 2026
- High7.4Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.24%Mar 18, 2026
- Medium5.3beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality.Check if you run itEPSS 0.30%Mar 18, 2026
- High7.1A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry con…Check if you run itEPSS 0.26%Mar 18, 2026
- Medium6.1The Writeprint Stylometry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'p' GET parameter in all versions up to and including 0.1.Check if you run itEPSS 0.35%Mar 18, 2026