Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: xss Clear
ID Title
CVE-2026-34033 Cross-Site Scripting (XSS) in github.com/apache/incubator-answer (CVE-2026-34033)
cross-site scripting in github.com/apache/incubator-answer (CVE-2026-34033). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.2-0.20260509080709-d1a4092c61cc` or later.
CVE-2026-8599 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8599)
cross-site scripting in wordpress (CVE-2026-8599). Risk of unauthorized operations or information disclosure.
CVE-2026-25688 Vulnerability in github.com/apache/incubator-answer (CVE-2026-25688)
vulnerability in github.com/apache/incubator-answer (CVE-2026-25688). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.2-0.20260525024654-2746bf5b455f` or later.
CVE-2026-8677 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8677)
cross-site scripting in wordpress (CVE-2026-8677). Risk of unauthorized operations or information disclosure.
CVE-2026-41539 Cross-Site Scripting (XSS) in qnap (CVE-2026-41539)
cross-site scripting in qnap (CVE-2026-41539). Risk of unauthorized operations or information disclosure.
CVE-2026-8977 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8977)
cross-site scripting in wordpress (CVE-2026-8977). Risk of unauthorized operations or information disclosure.
CVE-2026-8895 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8895)
cross-site scripting in wordpress (CVE-2026-8895). Risk of unauthorized operations or information disclosure.
CVE-2026-7662 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7662)
cross-site scripting in wordpress (CVE-2026-7662). Risk of unauthorized operations or information disclosure. Exploitable via ``epaperflip_embed``.
CVE-2026-8841 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8841)
cross-site scripting in wordpress (CVE-2026-8841). Risk of unauthorized operations or information disclosure.
CVE-2026-8882 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8882)
cross-site scripting in wordpress (CVE-2026-8882). Risk of unauthorized operations or information disclosure.
CVE-2026-8880 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8880)
cross-site scripting in wordpress (CVE-2026-8880). Risk of unauthorized operations or information disclosure.
CVE-2026-8883 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8883)
cross-site scripting in wordpress (CVE-2026-8883). Risk of unauthorized operations or information disclosure.
CVE-2026-41846 Cross-Site Scripting (XSS) in org.springframework:spring-webmvc (CVE-2026-41846)
cross-site scripting in org.springframework:spring-webmvc (CVE-2026-41846). Confidential information can be exposed externally.
CVE-2026-41845 Cross-Site Scripting (XSS) in org.springframework:spring-webmvc (CVE-2026-41845)
cross-site scripting in org.springframework:spring-webmvc (CVE-2026-41845). Confidential information can be exposed externally.
CVE-2026-41839 Vulnerability in org.springframework:spring-webflux (CVE-2026-41839)
vulnerability in org.springframework:spring-webflux (CVE-2026-41839). Risk of unauthorized operations or information disclosure.
CVE-2026-11603 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11603)
cross-site scripting in wordpress (CVE-2026-11603). Risk of unauthorized operations or information disclosure.
CVE-2026-10024 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10024)
cross-site scripting in wordpress (CVE-2026-10024). Risk of unauthorized operations or information disclosure.
CVE-2026-10738 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10738)
cross-site scripting in wordpress (CVE-2026-10738). Risk of unauthorized operations or information disclosure.
CVE-2026-10553 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-10553)
vulnerability in wordpress (CVE-2026-10553). Risk of unauthorized operations or information disclosure.
CVE-2026-5714 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5714)
cross-site scripting in wordpress (CVE-2026-5714). Risk of unauthorized operations or information disclosure.
CVE-2026-7556 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7556)
cross-site scripting in wordpress (CVE-2026-7556). Risk of unauthorized operations or information disclosure.
CVE-2026-10862 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10862)
cross-site scripting in wordpress (CVE-2026-10862). Risk of unauthorized operations or information disclosure.
CVE-2026-44746 Cross-Site Scripting (XSS) in CVE-2026-44746 (CVE-2026-44746)
cross-site scripting in CVE-2026-44746 (CVE-2026-44746). Risk of unauthorized operations or information disclosure.
CVE-2026-47725 Privilege Escalation in github.com/juev/nebula-mesh (CVE-2026-47725)
vulnerability in github.com/juev/nebula-mesh (CVE-2026-47725). Risk of unauthorized operations or information disclosure. Exploitable via `GET /ui/logout`. Mitigation: upgrade to `0.3.3` or later.
CVE-2026-47345 Cross-Site Scripting (XSS) in typo3/html-sanitizer (CVE-2026-47345)
cross-site scripting in typo3/html-sanitizer (CVE-2026-47345). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.2` or later.
CVE-2026-47344 Cross-Site Scripting (XSS) in typo3/html-sanitizer (CVE-2026-47344)
cross-site scripting in typo3/html-sanitizer (CVE-2026-47344). Risk of unauthorized operations or information disclosure. Exploitable via ``ALLOW_INSECURE_RAW_TEXT``. Mitigation: upgrade to `2.3.2` or later.
CVE-2026-11534 Cross-Site Scripting (XSS) in CVE-2026-11534 (CVE-2026-11534)
cross-site scripting in CVE-2026-11534 (CVE-2026-11534). Risk of unauthorized operations or information disclosure.
CVE-2026-29170 Cross-Site Scripting (XSS) in apache (CVE-2026-29170)
cross-site scripting in apache (CVE-2026-29170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.
CVE-2026-11518 Cross-Site Scripting (XSS) in CVE-2026-11518 (CVE-2026-11518)
cross-site scripting in CVE-2026-11518 (CVE-2026-11518). Risk of unauthorized operations or information disclosure.
CVE-2026-25558 Cross-Site Scripting (XSS) in CVE-2026-25558 (CVE-2026-25558)
cross-site scripting in CVE-2026-25558 (CVE-2026-25558). Risk of unauthorized operations or information disclosure.
CVE-2026-11520 Cross-Site Scripting (XSS) in CVE-2026-11520 (CVE-2026-11520)
cross-site scripting in CVE-2026-11520 (CVE-2026-11520). Risk of unauthorized operations or information disclosure.
CVE-2026-9549 Cross-Site Scripting (XSS) in checkmk (CVE-2026-9549)
cross-site scripting in checkmk (CVE-2026-9549). Risk of unauthorized operations or information disclosure.
CVE-2026-7186 Cross-Site Scripting (XSS) in checkmk (CVE-2026-7186)
cross-site scripting in checkmk (CVE-2026-7186). Risk of unauthorized operations or information disclosure.
CVE-2026-8078 Cross-Site Scripting (XSS) in checkmk (CVE-2026-8078)
cross-site scripting in checkmk (CVE-2026-8078). Risk of unauthorized operations or information disclosure.
CVE-2026-8833 Cross-Site Scripting (XSS) in checkmk (CVE-2026-8833)
cross-site scripting in checkmk (CVE-2026-8833). Risk of unauthorized operations or information disclosure.
CVE-2026-11512 Cross-Site Scripting (XSS) in CVE-2026-11512 (CVE-2026-11512)
cross-site scripting in CVE-2026-11512 (CVE-2026-11512). Risk of unauthorized operations or information disclosure.
CVE-2026-3011 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3011)
cross-site scripting in wordpress (CVE-2026-3011). Risk of unauthorized operations or information disclosure.
CVE-2026-11569 Cross-Site Scripting (XSS) in CVE-2026-11569 (CVE-2026-11569)
cross-site scripting in CVE-2026-11569 (CVE-2026-11569). Risk of unauthorized operations or information disclosure.
CVE-2026-41722 Cross-Site Scripting (XSS) in vmware (CVE-2026-41722)
cross-site scripting in vmware (CVE-2026-41722). Successful exploitation can lead to full system takeover.
CVE-2026-41724 Cross-Site Scripting (XSS) in vmware (CVE-2026-41724)
cross-site scripting in vmware (CVE-2026-41724). Successful exploitation can lead to full system takeover.
CVE-2026-41723 Cross-Site Scripting (XSS) in vmware (CVE-2026-41723)
cross-site scripting in vmware (CVE-2026-41723). Successful exploitation can lead to full system takeover.
CVE-2026-11491 Cross-Site Scripting (XSS) in CVE-2026-11491 (CVE-2026-11491)
cross-site scripting in CVE-2026-11491 (CVE-2026-11491). Risk of unauthorized operations or information disclosure.
CVE-2021-47984 Cross-Site Scripting (XSS) in wordpress (CVE-2021-47984)
cross-site scripting in wordpress (CVE-2021-47984). Risk of unauthorized operations or information disclosure.
CVE-2021-47982 Cross-Site Scripting (XSS) in wordpress (CVE-2021-47982)
cross-site scripting in wordpress (CVE-2021-47982). Risk of unauthorized operations or information disclosure.
CVE-2023-54351 Cross-Site Scripting (XSS) in wordpress (CVE-2023-54351)
cross-site scripting in wordpress (CVE-2023-54351). Risk of unauthorized operations or information disclosure.
CVE-2021-47983 Cross-Site Scripting (XSS) in c (CVE-2021-47983)
cross-site scripting in c (CVE-2021-47983). Risk of unauthorized operations or information disclosure.
CVE-2026-11468 Cross-Site Scripting (XSS) in CVE-2026-11468 (CVE-2026-11468)
cross-site scripting in CVE-2026-11468 (CVE-2026-11468). Risk of unauthorized operations or information disclosure.
CVE-2026-11436 Cross-Site Scripting (XSS) in CVE-2026-11436 (CVE-2026-11436)
cross-site scripting in CVE-2026-11436 (CVE-2026-11436). Risk of unauthorized operations or information disclosure.
CVE-2026-11434 Cross-Site Scripting (XSS) in CVE-2026-11434 (CVE-2026-11434)
cross-site scripting in CVE-2026-11434 (CVE-2026-11434). Risk of unauthorized operations or information disclosure.
CVE-2026-9594 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9594)
cross-site scripting in wordpress (CVE-2026-9594). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →