Search Vulnerabilities

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

WordPress Easy Media Download plugin <= 1.1.11 - CSS Injection vulnerability

Responsive Pricing Table <= 5.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency'

Key Figures <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting via kf_field_figure_default_color_render

WP Photo Album Plus <= 9.1.05.008 - Reflected Cross-Site Scripting

XSS in IBM Aspera Faspex

Amazon affiliate lite Plugin <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

WordPress Stockie Extra plugin <= 1.2.11 - Content Injection vulnerability

WordPress Norebro Extra plugin <= 1.6.8 - Content Injection vulnerability

LibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image Upload

XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication

WordPress Contact Form 7 Dynamic Text Extension plugin <= 5.0.3 - Content Injection vulnerability

DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content

Grandstream GXP1625 Network Status api.values.post cross site scripting

Nextcloud Server vulnerable to XSS in SVG images when opened outside of Nextcloud

Stored XSS in Datateam's Datactive

Apache SkyWalking: Stored XSS vulnerability

Astro is vulnerable to Reflected XSS via the server islands feature

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8

VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting