Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: xss Clear
ID Title
CVE-2026-16205 Cross-Site Scripting (XSS) in CVE-2026-16205 (CVE-2026-16205)
cross-site scripting in CVE-2026-16205 (CVE-2026-16205). Risk of unauthorized operations or information disclosure.
CVE-2026-16203 Cross-Site Scripting (XSS) in CVE-2026-16203 (CVE-2026-16203)
cross-site scripting in CVE-2026-16203 (CVE-2026-16203). Risk of unauthorized operations or information disclosure.
CVE-2026-16202 Cross-Site Scripting (XSS) in CVE-2026-16202 (CVE-2026-16202)
cross-site scripting in CVE-2026-16202 (CVE-2026-16202). Risk of unauthorized operations or information disclosure.
CVE-2026-16156 Cross-Site Scripting (XSS) in CVE-2026-16156 (CVE-2026-16156)
cross-site scripting in CVE-2026-16156 (CVE-2026-16156). Risk of unauthorized operations or information disclosure.
CVE-2026-16155 Cross-Site Scripting (XSS) in CVE-2026-16155 (CVE-2026-16155)
cross-site scripting in CVE-2026-16155 (CVE-2026-16155). Risk of unauthorized operations or information disclosure.
CVE-2026-57857 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57857)
cross-site scripting in wordpress (CVE-2026-57857). Risk of unauthorized operations or information disclosure.
CVE-2026-12228 Cross-Site Scripting (XSS) in lollms (CVE-2026-12228)
cross-site scripting in lollms (CVE-2026-12228). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/prompts/share`.
CVE-2026-54570 Vulnerability in AngleSharp (CVE-2026-54570)
vulnerability in AngleSharp (CVE-2026-54570). Data can be tampered with by attackers. Exploitable via ``MathAnnotationXmlElement``. Mitigation: upgrade to `1.5.0` or later.
CVE-2026-16073 Cross-Site Scripting (XSS) in CVE-2026-16073 (CVE-2026-16073)
cross-site scripting in CVE-2026-16073 (CVE-2026-16073). Risk of unauthorized operations or information disclosure.
CVE-2026-9585 Cross-Site Scripting (XSS) in CVE-2026-9585 (CVE-2026-9585)
cross-site scripting in CVE-2026-9585 (CVE-2026-9585). Risk of unauthorized operations or information disclosure.
CVE-2026-9588 Cross-Site Scripting (XSS) in CVE-2026-9588 (CVE-2026-9588)
cross-site scripting in CVE-2026-9588 (CVE-2026-9588). Risk of unauthorized operations or information disclosure.
CVE-2026-21762 Vulnerability in hcltech (CVE-2026-21762)
vulnerability in hcltech (CVE-2026-21762). Risk of unauthorized operations or information disclosure.
CVE-2026-58148 The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability.
The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability.
CVE-2026-51081 Cross-Site Scripting (XSS) in CVE-2026-51081 (CVE-2026-51081)
cross-site scripting in CVE-2026-51081 (CVE-2026-51081). Risk of unauthorized operations or information disclosure.
CVE-2024-23569 Vulnerability in CVE-2024-23569 (CVE-2024-23569)
vulnerability in CVE-2024-23569 (CVE-2024-23569). Risk of unauthorized operations or information disclosure.
CVE-2026-10525 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10525)
cross-site scripting in wordpress (CVE-2026-10525). Risk of unauthorized operations or information disclosure.
CVE-2026-15094 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15094)
cross-site scripting in wordpress (CVE-2026-15094). Risk of unauthorized operations or information disclosure.
CVE-2026-15759 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15759)
cross-site scripting in wordpress (CVE-2026-15759). Risk of unauthorized operations or information disclosure.
CVE-2026-15161 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.
CVE-2026-11324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11324)
cross-site scripting in wordpress (CVE-2026-11324). Risk of unauthorized operations or information disclosure.
CVE-2026-15395 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15395)
cross-site scripting in wordpress (CVE-2026-15395). Risk of unauthorized operations or information disclosure.
CVE-2026-2594 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2594)
cross-site scripting in wordpress (CVE-2026-2594). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.7` or later.
CVE-2026-62826 Cross-Site Scripting (XSS) in microsoft (CVE-2026-62826)
cross-site scripting in microsoft (CVE-2026-62826). Risk of unauthorized operations or information disclosure.
CVE-2026-58643 Cross-Site Scripting (XSS) in microsoft (CVE-2026-58643)
cross-site scripting in microsoft (CVE-2026-58643). Risk of unauthorized operations or information disclosure.
CVE-2026-46686 Cross-Site Scripting (XSS) in CVE-2026-46686 (CVE-2026-46686)
cross-site scripting in CVE-2026-46686 (CVE-2026-46686). Risk of unauthorized operations or information disclosure.
CVE-2026-63081 Cross-Site Scripting (XSS) in CVE-2026-63081 (CVE-2026-63081)
cross-site scripting in CVE-2026-63081 (CVE-2026-63081). Risk of unauthorized operations or information disclosure.
CVE-2026-7543 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7543)
cross-site scripting in wordpress (CVE-2026-7543). Risk of unauthorized operations or information disclosure.
CVE-2026-15099 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15099)
cross-site scripting in wordpress (CVE-2026-15099). Risk of unauthorized operations or information disclosure.
CVE-2026-15021 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15021)
cross-site scripting in wordpress (CVE-2026-15021). Risk of unauthorized operations or information disclosure.
CVE-2026-13755 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13755)
cross-site scripting in wordpress (CVE-2026-13755). Risk of unauthorized operations or information disclosure.
CVE-2026-15324 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15324)
cross-site scripting in wordpress (CVE-2026-15324). Risk of unauthorized operations or information disclosure.
CVE-2026-12978 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12978)
cross-site scripting in wordpress (CVE-2026-12978). Risk of unauthorized operations or information disclosure.
CVE-2026-15306 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15306)
cross-site scripting in wordpress (CVE-2026-15306). Risk of unauthorized operations or information disclosure.
CVE-2026-13042 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13042)
cross-site scripting in wordpress (CVE-2026-13042). Risk of unauthorized operations or information disclosure.
CVE-2026-15652 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15652)
cross-site scripting in wordpress (CVE-2026-15652). Risk of unauthorized operations or information disclosure.
CVE-2026-14987 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14987)
cross-site scripting in wordpress (CVE-2026-14987). Risk of unauthorized operations or information disclosure.
CVE-2026-13005 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13005)
cross-site scripting in wordpress (CVE-2026-13005). Risk of unauthorized operations or information disclosure.
CVE-2026-54498 Cross-Site Scripting (XSS) in view_component (CVE-2026-54498)
cross-site scripting in view_component (CVE-2026-54498). Confidential information can be exposed externally. Exploitable via ``around_render``. Mitigation: upgrade to `4.12.0` or later.
CVE-2026-26719 Cross-Site Scripting (XSS) in CVE-2026-26719 (CVE-2026-26719)
cross-site scripting in CVE-2026-26719 (CVE-2026-26719). Risk of unauthorized operations or information disclosure.
CVE-2026-49867 Cross-Site Scripting (XSS) in CVE-2026-49867 (CVE-2026-49867)
cross-site scripting in CVE-2026-49867 (CVE-2026-49867). Risk of unauthorized operations or information disclosure. Exploitable via `POST /de2api/templateManage/save`.
CVE-2026-62378 Cross-Site Scripting (XSS) in CVE-2026-62378 (CVE-2026-62378)
cross-site scripting in CVE-2026-62378 (CVE-2026-62378). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.1.10` or later.
CVE-2026-1562 Cross-Site Scripting (XSS) in pega (CVE-2026-1562)
cross-site scripting in pega (CVE-2026-1562). Risk of unauthorized operations or information disclosure.
CVE-2026-1563 Cross-Site Scripting (XSS) in pega (CVE-2026-1563)
cross-site scripting in pega (CVE-2026-1563). Risk of unauthorized operations or information disclosure.
CVE-2026-9007 Cross-Site Scripting (XSS) in CVE-2026-9007 (CVE-2026-9007)
cross-site scripting in CVE-2026-9007 (CVE-2026-9007). Risk of unauthorized operations or information disclosure.
CVE-2026-59838 Vulnerability in fortinet (CVE-2026-59838)
vulnerability in fortinet (CVE-2026-59838). Risk of unauthorized operations or information disclosure.
CVE-2026-61453 Cross-Site Scripting (XSS) in CVE-2026-61453 (CVE-2026-61453)
cross-site scripting in CVE-2026-61453 (CVE-2026-61453). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.1` or later.
CVE-2026-56398 Vulnerability in openwebui (CVE-2026-56398)
vulnerability in openwebui (CVE-2026-56398). Confidential information can be exposed externally.
CVE-2026-58077 Cross-Site Scripting (XSS) in CVE-2026-58077 (CVE-2026-58077)
cross-site scripting in CVE-2026-58077 (CVE-2026-58077). Risk of unauthorized operations or information disclosure.
CVE-2026-57833 Cross-Site Scripting (XSS) in CVE-2026-57833 (CVE-2026-57833)
cross-site scripting in CVE-2026-57833 (CVE-2026-57833). Risk of unauthorized operations or information disclosure.
CVE-2026-48371 Cross-Site Scripting (XSS) in adobe (CVE-2026-48371)
cross-site scripting in adobe (CVE-2026-48371). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →