Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.39%Mar 10, 2026
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier.Check if you run itEPSS 0.23%Mar 10, 2026
- Medium5.4IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to cross-site scripting.Check if you run itEPSS 0.22%Mar 10, 2026
- Medium4.6Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.Check if you run itEPSS 0.25%Mar 10, 2026
- Medium6.4The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including,…Check if you run itEPSS 0.34%Mar 10, 2026
- Low2.0RenderBlocking is a MediaWiki extension that allows interface administrators to specify render-blocking CSS and JavaScript.Check if you run itEPSS 0.51%Mar 10, 2026
- Medium5.4Copyparty is a portable file server.Check if you run itEPSS 0.36%Mar 10, 2026
- Medium5.4FileBrowser Quantum is a free, self-hosted, web-based file manager.Check if you run itEPSS 0.38%Mar 10, 2026
- High7.2The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form entry fields in all versions up to, and including, 2.0.5.Check if you run itEPSS 0.43%Mar 10, 2026
- Medium4.7Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information…Check if you run itEPSS 0.80%Mar 10, 2026
- Critical9.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing…Check if you run itEPSS 1.17%Mar 10, 2026
- Medium6.1An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may al…Check if you run itEPSS 0.34%Mar 10, 2026
- High7.2The MetForm Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Quiz feature in all versions up to, and including, 3.9.6 due to insufficient…Check if you run itEPSS 0.32%Mar 10, 2026
- Medium6.1An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in benkeen generatedata 4.0.14.Check if you run itEPSS 0.32%Mar 10, 2026
- Medium4.8An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0…Check if you run itEPSS 0.32%Mar 10, 2026
- Medium5.1CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attacke…Check if you run itEPSS 0.23%Mar 10, 2026
- Medium5.4facileManager is a modular suite of web apps built with the sysadmin in mind.Check if you run itEPSS 0.29%Mar 10, 2026
- Medium6.1facileManager is a modular suite of web apps built with the sysadmin in mind.Check if you run itEPSS 0.30%Mar 10, 2026
- High8.8Bucket is a MediaWiki extension to store and retrieve structured data on articles.Check if you run itEPSS 0.54%Mar 10, 2026
- Medium4.6Flarum is open-source forum software.Check if you run itEPSS 0.30%Mar 10, 2026
- Critical9.0Appsmith is a platform to build admin panels, internal tools, and dashboards.Check if you run itEPSS 0.46%Mar 10, 2026
- Medium6.1Due to insufficient validation of user-controlled input in the URLs query parameter.Check if you run itEPSS 0.22%Mar 10, 2026
- Medium6.1Affected Product(s)Version(s)InfoSphere Data Architect9.2.1Check if you run itEPSS 0.15%Mar 10, 2026
- Critical9.0Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.40%Mar 9, 2026
- High8.8An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.36%Mar 9, 2026