Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Tag: cwe-79 Clear
ID Title
CVE-2026-55779 Cross-Site Scripting (XSS) in silverstripe/versioned (CVE-2026-55779)
cross-site scripting in silverstripe/versioned (CVE-2026-55779). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-55696 Cross-Site Scripting (XSS) in privatebin/privatebin (CVE-2026-55696)
cross-site scripting in privatebin/privatebin (CVE-2026-55696). Risk of unauthorized operations or information disclosure. Exploitable via ``lang``. Mitigation: upgrade to `2.0.5` or later.
CVE-2026-55566 Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55566)
cross-site scripting in org.yamcs:yamcs-core (CVE-2026-55566). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.12.8` or later.
CVE-2026-55549 Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55549)
cross-site scripting in org.yamcs:yamcs-core (CVE-2026-55549). Confidential information can be exposed externally. Exploitable via ``fetch``. Mitigation: upgrade to `5.9.4` or later.
CVE-2026-38725 Cross-Site Scripting (XSS) in CVE-2026-38725 (CVE-2026-38725)
cross-site scripting in CVE-2026-38725 (CVE-2026-38725). Risk of unauthorized operations or information disclosure.
CVE-2026-6286 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6286)
cross-site scripting in wordpress (CVE-2026-6286). Risk of unauthorized operations or information disclosure.
CVE-2026-82090 Cross-Site Scripting (XSS) in CVE-2026-82090 (CVE-2026-82090)
cross-site scripting in CVE-2026-82090 (CVE-2026-82090). Risk of unauthorized operations or information disclosure.
CVE-2026-78615 Cross-Site Scripting (XSS) in CVE-2026-78615 (CVE-2026-78615)
cross-site scripting in CVE-2026-78615 (CVE-2026-78615). Risk of unauthorized operations or information disclosure.
CVE-2026-78616 Cross-Site Scripting (XSS) in CVE-2026-78616 (CVE-2026-78616)
cross-site scripting in CVE-2026-78616 (CVE-2026-78616). Risk of unauthorized operations or information disclosure.
CVE-2026-78195 Cross-Site Scripting (XSS) in CVE-2026-78195 (CVE-2026-78195)
cross-site scripting in CVE-2026-78195 (CVE-2026-78195). Risk of unauthorized operations or information disclosure.
CVE-2026-78047 Cross-Site Scripting (XSS) in CVE-2026-78047 (CVE-2026-78047)
cross-site scripting in CVE-2026-78047 (CVE-2026-78047). Risk of unauthorized operations or information disclosure.
CVE-2026-81731 Cross-Site Scripting (XSS) in CVE-2026-81731 (CVE-2026-81731)
cross-site scripting in CVE-2026-81731 (CVE-2026-81731). Risk of unauthorized operations or information disclosure.
CVE-2026-59281 Cross-Site Scripting (XSS) in spring (CVE-2026-59281)
cross-site scripting in spring (CVE-2026-59281). Risk of unauthorized operations or information disclosure.
CVE-2026-53579 Cross-Site Scripting (XSS) in CVE-2026-53579 (CVE-2026-53579)
cross-site scripting in CVE-2026-53579 (CVE-2026-53579). Risk of unauthorized operations or information disclosure.
CVE-2026-53578 Cross-Site Scripting (XSS) in CVE-2026-53578 (CVE-2026-53578)
cross-site scripting in CVE-2026-53578 (CVE-2026-53578). Risk of unauthorized operations or information disclosure.
CVE-2026-48996 Cross-Site Scripting (XSS) in CVE-2026-48996 (CVE-2026-48996)
cross-site scripting in CVE-2026-48996 (CVE-2026-48996). Risk of unauthorized operations or information disclosure.
CVE-2026-81753 Cross-Site Scripting (XSS) in CVE-2026-81753 (CVE-2026-81753)
cross-site scripting in CVE-2026-81753 (CVE-2026-81753). Risk of unauthorized operations or information disclosure.
CVE-2026-77989 Cross-Site Scripting (XSS) in csharp (CVE-2026-77989)
cross-site scripting in csharp (CVE-2026-77989). Risk of unauthorized operations or information disclosure.
CVE-2026-47666 Cross-Site Scripting (XSS) in CVE-2026-47666 (CVE-2026-47666)
cross-site scripting in CVE-2026-47666 (CVE-2026-47666). Confidential information can be exposed externally.
CVE-2026-16809 Cross-Site Scripting (XSS) in CVE-2026-16809 (CVE-2026-16809)
cross-site scripting in CVE-2026-16809 (CVE-2026-16809). Risk of unauthorized operations or information disclosure.
CVE-2026-15973 Cross-Site Scripting (XSS) in c (CVE-2026-15973)
cross-site scripting in c (CVE-2026-15973). Risk of unauthorized operations or information disclosure.
CVE-2026-39275 Cross-Site Scripting (XSS) in CVE-2026-39275 (CVE-2026-39275)
cross-site scripting in CVE-2026-39275 (CVE-2026-39275). Risk of unauthorized operations or information disclosure.
CVE-2026-54606 Cross-Site Scripting (XSS) in suneditor (CVE-2026-54606)
cross-site scripting in suneditor (CVE-2026-54606). Risk of unauthorized operations or information disclosure. Exploitable via `GET /poc.js`. Mitigation: upgrade to `3.1.4` or later.
CVE-2026-18331 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18331)
cross-site scripting in wordpress (CVE-2026-18331). Risk of unauthorized operations or information disclosure.
CVE-2026-19760 Cross-Site Scripting (XSS) in wordpress (CVE-2026-19760)
cross-site scripting in wordpress (CVE-2026-19760). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-79793 Cross-Site Scripting (XSS) in CVE-2026-79793 (CVE-2026-79793)
cross-site scripting in CVE-2026-79793 (CVE-2026-79793). Risk of unauthorized operations or information disclosure.
CVE-2026-74932 Cross-Site Scripting (XSS) in wordpress (CVE-2026-74932)
cross-site scripting in wordpress (CVE-2026-74932). Successful exploitation can lead to full system takeover. Exploitable via `Host header`.
CVE-2026-79663 Cross-Site Scripting (XSS) in c (CVE-2026-79663)
cross-site scripting in c (CVE-2026-79663). Risk of unauthorized operations or information disclosure.
CVE-2026-18547 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18547)
cross-site scripting in wordpress (CVE-2026-18547). Risk of unauthorized operations or information disclosure.
CVE-2026-16231 Cross-Site Scripting (XSS) in express (CVE-2026-16231)
cross-site scripting in express (CVE-2026-16231). Confidential information can be exposed externally. Mitigation: upgrade to `4.3.0` or later.
CVE-2026-18323 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-18328 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-18100 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18100)
cross-site scripting in wordpress (CVE-2026-18100). Risk of unauthorized operations or information disclosure.
CVE-2026-56704 Cross-Site Scripting (XSS) in CVE-2026-56704 (CVE-2026-56704)
cross-site scripting in CVE-2026-56704 (CVE-2026-56704). Risk of unauthorized operations or information disclosure.
CVE-2026-71503 Cross-Site Scripting (XSS) in CVE-2026-71503 (CVE-2026-71503)
cross-site scripting in CVE-2026-71503 (CVE-2026-71503). Risk of unauthorized operations or information disclosure.
CVE-2026-76837 Cross-Site Scripting (XSS) in CVE-2026-76837 (CVE-2026-76837)
cross-site scripting in CVE-2026-76837 (CVE-2026-76837). Risk of unauthorized operations or information disclosure. Exploitable via `PATCH /api/user/account/`.
CVE-2026-78391 Cross-Site Scripting (XSS) in CVE-2026-78391 (CVE-2026-78391)
cross-site scripting in CVE-2026-78391 (CVE-2026-78391). Risk of unauthorized operations or information disclosure.
CVE-2026-78414 Cross-Site Scripting (XSS) in CVE-2026-78414 (CVE-2026-78414)
cross-site scripting in CVE-2026-78414 (CVE-2026-78414). Successful exploitation can lead to full system takeover.
CVE-2026-65053 Cross-Site Scripting (XSS) in CVE-2026-65053 (CVE-2026-65053)
cross-site scripting in CVE-2026-65053 (CVE-2026-65053). Risk of unauthorized operations or information disclosure.
CVE-2026-17033 Cross-Site Scripting (XSS) in CVE-2026-17033 (CVE-2026-17033)
cross-site scripting in CVE-2026-17033 (CVE-2026-17033). Confidential information can be exposed externally.
CVE-2026-78213 Cross-Site Scripting (XSS) in CVE-2026-78213 (CVE-2026-78213)
cross-site scripting in CVE-2026-78213 (CVE-2026-78213). Confidential information can be exposed externally.
CVE-2026-78060 Cross-Site Scripting (XSS) in CVE-2026-78060 (CVE-2026-78060)
cross-site scripting in CVE-2026-78060 (CVE-2026-78060). Risk of unauthorized operations or information disclosure.
CVE-2026-78059 Cross-Site Scripting (XSS) in CVE-2026-78059 (CVE-2026-78059)
cross-site scripting in CVE-2026-78059 (CVE-2026-78059). Risk of unauthorized operations or information disclosure.
CVE-2026-78055 Cross-Site Scripting (XSS) in CVE-2026-78055 (CVE-2026-78055)
cross-site scripting in CVE-2026-78055 (CVE-2026-78055). Risk of unauthorized operations or information disclosure.
CVE-2026-78054 Cross-Site Scripting (XSS) in CVE-2026-78054 (CVE-2026-78054)
cross-site scripting in CVE-2026-78054 (CVE-2026-78054). Risk of unauthorized operations or information disclosure.
CVE-2026-66917 Cross-Site Scripting (XSS) in csharp (CVE-2026-66917)
cross-site scripting in csharp (CVE-2026-66917). Risk of unauthorized operations or information disclosure.
CVE-2026-76789 Cross-Site Scripting (XSS) in wordpress (CVE-2026-76789)
cross-site scripting in wordpress (CVE-2026-76789). Successful exploitation can lead to full system takeover.
CVE-2026-16260 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16260)
cross-site scripting in wordpress (CVE-2026-16260). Successful exploitation can lead to full system takeover.
CVE-2026-53529 Cross-Site Scripting (XSS) in CVE-2026-53529 (CVE-2026-53529)
cross-site scripting in CVE-2026-53529 (CVE-2026-53529). Risk of unauthorized operations or information disclosure.
CVE-2026-69234 Cross-Site Scripting (XSS) in CVE-2026-69234 (CVE-2026-69234)
cross-site scripting in CVE-2026-69234 (CVE-2026-69234). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →