Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attac…Check if you run itEPSS 0.14%Mar 18, 2026
- Medium6.1jsPDF is a library to generate PDFs in JavaScript.Check if you run itEPSS 0.42%Mar 18, 2026
- Medium6.1The [CR]Paid Link Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.5 due to insuff…Check if you run itEPSS 0.18%Mar 18, 2026
- Low1.9A flaw has been found in itsourcecode University Management System 1.0.Check if you run itEPSS 0.36%Mar 18, 2026
- Medium6.4The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmza_custom_js’ parameter in all versions up to,…Check if you run itEPSS 0.27%Mar 18, 2026
- Medium6.9LeafKit is a templating language with Swift-inspired syntax.Check if you run itEPSS 0.35%Mar 18, 2026
- Low2.0A vulnerability was detected in Portabilis i-Educar 2.11.Check if you run itEPSS 0.34%Mar 18, 2026
- Low2.0A vulnerability was identified in TRENDnet TEW-824DRU 1.010B01/1.04B01.Check if you run itEPSS 0.34%Mar 18, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inje…Check if you run itEPSS 0.30%Mar 17, 2026
- Medium6.1HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage.Check if you run itEPSS 0.16%Mar 17, 2026
- High7.18theme XStore Core Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Mar 17, 2026
- Medium6.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.27%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a reflected cross-site scripting vulnerability in the Network Diagnosis ping function that allows attacker…Check if you run itEPSS 0.28%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaSc…Check if you run itEPSS 0.25%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaSc…Check if you run itEPSS 0.25%Mar 16, 2026
- Medium5.4An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute…Check if you run itEPSS 0.25%Mar 16, 2026
- Medium6.1Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms.Check if you run itEPSS 0.18%Mar 16, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.This issue…Check if you run itEPSS 0.15%Mar 16, 2026
- Medium4.8Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.Check if you run itEPSS 0.17%Mar 16, 2026
- Low1.9A security flaw has been discovered in CMS Made Simple up to 2.2.21.Check if you run itEPSS 0.36%Mar 16, 2026
- Low2.0A vulnerability was determined in UEditor up to 1.4.3.2.Check if you run itEPSS 0.34%Mar 16, 2026
- Medium5.1A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2.Check if you run itEPSS 0.36%Mar 16, 2026
- Medium4.8A security flaw has been discovered in Tecnick TCExam up to 16.6.0.Check if you run itEPSS 0.36%Mar 16, 2026
- Low1.9A vulnerability was identified in Tecnick TCExam 16.5.0.Check if you run itEPSS 0.36%Mar 16, 2026
- Low2.0A vulnerability was found in Wavlink WL-NU516U1 240425.Check if you run itEPSS 0.36%Mar 16, 2026