Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7PublicCMS v5.202506.d and earlier is vulnerable to stored XSS.Check if you run itEPSS 0.37%Feb 27, 2026
- Medium4.8Authenticated Iframe Injection in Dato CMS Web Previews plugin.Check if you run itEPSS 0.42%Feb 27, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KNOWHY Advanced Technology Trading Ltd.Check if you run itEPSS 0.21%Feb 27, 2026
- Medium5.1PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality.Check if you run itEPSS 0.18%Feb 27, 2026
- Medium5.1PluXml CMS is vulnerable to Stored XSS in file uploading functionality.Check if you run itEPSS 0.18%Feb 27, 2026
- Medium5.1Omega-PSIR is vulnerable to Reflected XSS via the lang parameter.Check if you run itEPSS 0.16%Feb 27, 2026
- Medium6.4The Electric Enquiries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button' parameter of the electric-enquiry shortcode in all versions u…Check if you run itEPSS 0.25%Feb 27, 2026
- Medium6.4The Simple Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field in all versions up to, and including, 4.0.5 due to insuf…Check if you run itEPSS 0.21%Feb 27, 2026
- Medium6.4The WP Accessibility plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'alt' attribute of images processed by the "Long Description U…Check if you run itEPSS 0.21%Feb 27, 2026
- Low2.1A weakness has been identified in SourceCodester Doctor Appointment System 1.0.Check if you run itEPSS 0.50%Feb 27, 2026
- Medium6.4The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Scroller widget box link attribut…Check if you run itEPSS 0.22%Feb 27, 2026
- Medium6.4The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Call to Action' custom fields in all version…Check if you run itEPSS 0.28%Feb 27, 2026
- High8.7osctrl is an osquery management solution.Check if you run itEPSS 0.44%Feb 26, 2026
- High8.7Initiative is a self-hosted project management platform.Check if you run itEPSS 0.58%Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Check if you run itEPSS 0.29%Feb 26, 2026
- Medium5.4A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0.Check if you run itEPSS 0.20%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes'…Check if you run itEPSS 0.29%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' endpoint,…Check if you run itEPSS 0.29%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/customers' endp…Check if you run itEPSS 0.29%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/representatives-management' endpo…Check if you run itEPSS 0.29%Feb 26, 2026
- High7.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology Ltd.Check if you run itEPSS 0.19%Feb 26, 2026
- High7.3Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to i…Check if you run itEPSS 0.15%Feb 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects…Check if you run itEPSS 0.24%Feb 26, 2026
- Low2.3Some HTTP security headers are not properly set by the web server when sending responses to the client application.Check if you run itEPSS 0.15%Feb 26, 2026
- Medium5.3An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included.Check if you run itEPSS 0.21%Feb 26, 2026