Search Vulnerabilities

Chamilo: HTML injection via open parameter

Chamilo: Reflected XSS via page parameter

WordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerability

n8n Vulnerable to Stored XSS via Various Nodes

Vikunja has Reflected HTML Injection via filter Parameter in Projects Module

LinkAce: Stored XSS in Atom Feed via CDATA Escape in List Description

WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode Execution vulnerability

WordPress Everest Forms plugin <= 3.4.1 - Arbitrary Shortcode Execution vulnerability

IBM webMethods Integration Server is vulnerable to HTML injection

Vikunja Affected by XSS Via Task Preview

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode

OpenProject vulnerable to Stored HTML injection

Winter Affected by Stored Cross-Site Scripting (XSS) in Asset Manager

Navidrome is vulnerable to XSS via comment from song metadata

n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI

XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages

WordPress Textmetrics plugin <= 3.6.3 - Arbitrary Shortcode Execution vulnerability

WordPress DeepDigital theme <= 1.0.2 - Arbitrary Shortcode Execution vulnerability

WordPress WoodMart theme <= 8.3.7 - Arbitrary Shortcode Execution vulnerability