Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '…EPSS 0.2%Oct 13, 2026
- Medium5.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.EPSS 0.2%Oct 13, 2026
- Medium5.1Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL.EPSS 0.2%Oct 13, 2026
- Medium5.4IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.Oct 12, 2026
- Medium5.4IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting.EPSS 0.1%Oct 12, 2026
- High8.5Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile field that is rendered without escaping into portal pages.EPSS 0.2%Oct 12, 2026
- Medium5.3Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability in a public portal form that accepts unauthenticated submis…EPSS 0.2%Oct 12, 2026
- Medium5.1Frappe ERPNext 16.x before 16.27.0 contains a stored cross-site scripting vulnerability that allows users with edit rights to inject script through a record name rende…EPSS 0.2%Oct 12, 2026
- Low1.9A security vulnerability has been detected in Edimax BR-6208AC 1.32.EPSS 0.2%Oct 12, 2026
- Low1.9A weakness has been identified in Edimax BR-6208AC 1.32.EPSS 0.3%Oct 12, 2026
- High8.6Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to missing input validation on a certain page, allowi…EPSS 0.3%Oct 12, 2026
- Low2.1A vulnerability was determined in Netcore NR268 1.7.121109.EPSS 0.3%Oct 12, 2026
- High8.4EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles.EPSS 0.3%Oct 12, 2026
- Low2.1A vulnerability was found in Netcore NR268 1.7.121109.EPSS 0.3%Oct 12, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0.EPSS 0.3%Oct 12, 2026
- Medium5.3Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME regist…EPSS 0.2%Oct 12, 2026
- Medium5.1Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks…EPSS 0.2%Oct 12, 2026
- High8.5Open WebUI from 0.6.33 before 0.11.4 contains a cross-site scripting vulnerability that allows authenticated users to execute script in victims' sessions by storing ja…EPSS 0.3%Oct 12, 2026
- High8.4Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by up…EPSS 0.3%Oct 12, 2026
- Medium6.9ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when…EPSS 0.3%Oct 12, 2026
- Low1.9A vulnerability was identified in Netcore NR268 1.7.121109.EPSS 0.3%Oct 12, 2026
- Medium6.1Cross-site scripting in Progress MarkLogic ServerOct 12, 2026
- Medium5.3LibreNMS before 26.9.0 Stored XSS via wireless sensor descriptionEPSS 0.2%Oct 12, 2026
- Medium5.1Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.phpEPSS 0.2%Oct 12, 2026
- Medium5.3Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagination and Admin ViewsEPSS 0.2%Oct 12, 2026