Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: xss Clear
ID Title
CVE-2026-74992 Cross-Site Scripting (XSS) in wordpress (CVE-2026-74992)
cross-site scripting in wordpress (CVE-2026-74992). Successful exploitation can lead to full system takeover.
CVE-2026-76367 Cross-Site Scripting (XSS) in splunk (CVE-2026-76367)
cross-site scripting in splunk (CVE-2026-76367). Risk of unauthorized operations or information disclosure.
CVE-2026-76325 Cross-Site Scripting (XSS) in splunk (CVE-2026-76325)
cross-site scripting in splunk (CVE-2026-76325). Confidential information can be exposed externally.
CVE-2026-76324 Cross-Site Scripting (XSS) in splunk (CVE-2026-76324)
cross-site scripting in splunk (CVE-2026-76324). Confidential information can be exposed externally.
CVE-2026-76252 Cross-Site Scripting (XSS) in splunk (CVE-2026-76252)
cross-site scripting in splunk (CVE-2026-76252). Confidential information can be exposed externally.
CVE-2026-67189 Cross-Site Scripting (XSS) in CVE-2026-67189 (CVE-2026-67189)
cross-site scripting in CVE-2026-67189 (CVE-2026-67189). Risk of unauthorized operations or information disclosure.
CVE-2026-55085 Cross-Site Scripting (XSS) in CVE-2026-55085 (CVE-2026-55085)
cross-site scripting in CVE-2026-55085 (CVE-2026-55085). Confidential information can be exposed externally.
CVE-2026-64851 Cross-Site Scripting (XSS) in wordpress (CVE-2026-64851)
cross-site scripting in wordpress (CVE-2026-64851). Risk of unauthorized operations or information disclosure.
CVE-2026-18430 Cross-Site Scripting (XSS) in CVE-2026-18430 (CVE-2026-18430)
cross-site scripting in CVE-2026-18430 (CVE-2026-18430). Risk of unauthorized operations or information disclosure.
CVE-2026-20232 Vulnerability in cisco (CVE-2026-20232)
vulnerability in cisco (CVE-2026-20232). Risk of unauthorized operations or information disclosure.
CVE-2026-75955 Cross-Site Scripting (XSS) in CVE-2026-75955 (CVE-2026-75955)
cross-site scripting in CVE-2026-75955 (CVE-2026-75955). Risk of unauthorized operations or information disclosure.
CVE-2026-54793 Cross-Site Scripting (XSS) in dell (CVE-2026-54793)
cross-site scripting in dell (CVE-2026-54793). Risk of unauthorized operations or information disclosure.
CVE-2026-40507 Cross-Site Scripting (XSS) in CVE-2026-40507 (CVE-2026-40507)
cross-site scripting in CVE-2026-40507 (CVE-2026-40507). Risk of unauthorized operations or information disclosure.
CVE-2026-40508 Cross-Site Scripting (XSS) in CVE-2026-40508 (CVE-2026-40508)
cross-site scripting in CVE-2026-40508 (CVE-2026-40508). Risk of unauthorized operations or information disclosure.
CVE-2026-18756 Cross-Site Scripting (XSS) in CVE-2026-18756 (CVE-2026-18756)
cross-site scripting in CVE-2026-18756 (CVE-2026-18756). Risk of unauthorized operations or information disclosure.
CVE-2026-18526 Cross-Site Scripting (XSS) in CVE-2026-18526 (CVE-2026-18526)
cross-site scripting in CVE-2026-18526 (CVE-2026-18526). Risk of unauthorized operations or information disclosure.
CVE-2026-75920 Vulnerability in CVE-2026-75920 (CVE-2026-75920)
vulnerability in CVE-2026-75920 (CVE-2026-75920). Confidential information can be exposed externally.
CVE-2026-75916 Cross-Site Scripting (XSS) in CVE-2026-75916 (CVE-2026-75916)
cross-site scripting in CVE-2026-75916 (CVE-2026-75916). Successful exploitation can lead to full system takeover.
CVE-2026-75917 Cross-Site Scripting (XSS) in CVE-2026-75917 (CVE-2026-75917)
cross-site scripting in CVE-2026-75917 (CVE-2026-75917). Successful exploitation can lead to full system takeover.
CVE-2026-73354 Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
CVE-2026-73182 Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
CVE-2026-73184 Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
CVE-2026-66596 Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
CVE-2026-61986 Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
CVE-2026-75981 Cross-Site Scripting (XSS) in wordpress (CVE-2026-75981)
cross-site scripting in wordpress (CVE-2026-75981). Risk of unauthorized operations or information disclosure.
CVE-2026-15780 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15780)
cross-site scripting in wordpress (CVE-2026-15780). Risk of unauthorized operations or information disclosure.
CVE-2026-15446 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15446)
cross-site scripting in wordpress (CVE-2026-15446). Risk of unauthorized operations or information disclosure.
CVE-2026-19055 Cross-Site Scripting (XSS) in wordpress (CVE-2026-19055)
cross-site scripting in wordpress (CVE-2026-19055). Risk of unauthorized operations or information disclosure.
CVE-2026-19056 Cross-Site Scripting (XSS) in c (CVE-2026-19056)
cross-site scripting in c (CVE-2026-19056). Risk of unauthorized operations or information disclosure.
CVE-2026-18202 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18202)
cross-site scripting in wordpress (CVE-2026-18202). Successful exploitation can lead to full system takeover.
CVE-2026-16570 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16570)
cross-site scripting in wordpress (CVE-2026-16570). Risk of unauthorized operations or information disclosure.
CVE-2026-16617 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16617)
cross-site scripting in wordpress (CVE-2026-16617). Successful exploitation can lead to full system takeover.
CVE-2026-66358 Cross-Site Scripting (XSS) in jvn (CVE-2026-66358)
cross-site scripting in jvn (CVE-2026-66358). Risk of unauthorized operations or information disclosure.
CVE-2026-15421 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15421)
cross-site scripting in wordpress (CVE-2026-15421). Risk of unauthorized operations or information disclosure.
CVE-2026-66591 Cross-Site Scripting (XSS) in CVE-2026-66591 (CVE-2026-66591)
cross-site scripting in CVE-2026-66591 (CVE-2026-66591). Risk of unauthorized operations or information disclosure.
CVE-2026-27365 Cross-Site Scripting (XSS) in CVE-2026-27365 (CVE-2026-27365)
cross-site scripting in CVE-2026-27365 (CVE-2026-27365). Risk of unauthorized operations or information disclosure.
CVE-2026-66603 Cross-Site Scripting (XSS) in CVE-2026-66603 (CVE-2026-66603)
cross-site scripting in CVE-2026-66603 (CVE-2026-66603). Risk of unauthorized operations or information disclosure.
CVE-2026-21580 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-21580)
cross-site scripting in privilege-escalation (CVE-2026-21580). Risk of unauthorized operations or information disclosure.
CVE-2026-41921 Cross-Site Scripting (XSS) in CVE-2026-41921 (CVE-2026-41921)
cross-site scripting in CVE-2026-41921 (CVE-2026-41921). Risk of unauthorized operations or information disclosure.
CVE-2025-9211 Cross-Site Scripting (XSS) in CVE-2025-9211 (CVE-2025-9211)
cross-site scripting in CVE-2025-9211 (CVE-2025-9211). Confidential information can be exposed externally.
CVE-2026-52609 Cross-Site Scripting (XSS) in CVE-2026-52609 (CVE-2026-52609)
cross-site scripting in CVE-2026-52609 (CVE-2026-52609). Risk of unauthorized operations or information disclosure.
CVE-2026-73336 Cross-Site Scripting (XSS) in CVE-2026-73336 (CVE-2026-73336)
cross-site scripting in CVE-2026-73336 (CVE-2026-73336). Risk of unauthorized operations or information disclosure.
CVE-2026-52606 Cross-Site Scripting (XSS) in CVE-2026-52606 (CVE-2026-52606)
cross-site scripting in CVE-2026-52606 (CVE-2026-52606). Risk of unauthorized operations or information disclosure.
CVE-2026-30250 Cross-Site Scripting (XSS) in CVE-2026-30250 (CVE-2026-30250)
cross-site scripting in CVE-2026-30250 (CVE-2026-30250). Risk of unauthorized operations or information disclosure.
CVE-2026-55839 Cross-Site Scripting (XSS) in io.kestra:kestra (CVE-2026-55839)
cross-site scripting in io.kestra:kestra (CVE-2026-55839). Confidential information can be exposed externally. Exploitable via ``onclick``. Mitigation: upgrade to `1.3.24` or later.
CVE-2026-73382 Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions.
CVE-2026-73393 Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.
Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.
CVE-2026-73342 Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.
CVE-2026-73358 Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.
CVE-2026-73338 Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →