Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-79 Clear
ID Title
CVE-2026-35403 Cross-Site Scripting (XSS) in mcgill (CVE-2026-35403)
cross-site scripting in mcgill (CVE-2026-35403). Confidential information can be exposed externally. Mitigation: upgrade to `27.0.3` or later.
CVE-2026-39392 Cross-Site Scripting (XSS) in ci4-cms-erp (CVE-2026-39392)
cross-site scripting in ci4-cms-erp (CVE-2026-39392). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.31.4.0` or later.
CVE-2026-39391 Cross-Site Scripting (XSS) in ci4-cms-erp (CVE-2026-39391)
cross-site scripting in ci4-cms-erp (CVE-2026-39391). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.31.4.0` or later.
CVE-2026-39390 Cross-Site Scripting (XSS) in ci4-cms-erp (CVE-2026-39390)
cross-site scripting in ci4-cms-erp (CVE-2026-39390). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.31.4.0` or later.
CVE-2026-2509 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2509)
cross-site scripting in wordpress (CVE-2026-2509). Risk of unauthorized operations or information disclosure.
CVE-2026-5301 Cross-Site Scripting (XSS) in coolercontrol (CVE-2026-5301)
cross-site scripting in coolercontrol (CVE-2026-5301). Data can be tampered with by attackers.
CVE-2026-2481 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2481)
cross-site scripting in wordpress (CVE-2026-2481). Risk of unauthorized operations or information disclosure.
CVE-2026-4303 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4303)
cross-site scripting in wordpress (CVE-2026-4303). Risk of unauthorized operations or information disclosure.
CVE-2026-4073 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4073)
cross-site scripting in wordpress (CVE-2026-4073). Risk of unauthorized operations or information disclosure.
CVE-2026-4300 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4300)
cross-site scripting in wordpress (CVE-2026-4300). Risk of unauthorized operations or information disclosure. Exploitable via ``rbs_gallery_LoadingWord``.
CVE-2026-4025 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4025)
cross-site scripting in wordpress (CVE-2026-4025). Risk of unauthorized operations or information disclosure.
CVE-2026-39708 Cross-Site Scripting (XSS) in CVE-2026-39708 (CVE-2026-39708)
cross-site scripting in CVE-2026-39708 (CVE-2026-39708). Risk of unauthorized operations or information disclosure.
CVE-2026-39696 Cross-Site Scripting (XSS) in CVE-2026-39696 (CVE-2026-39696)
cross-site scripting in CVE-2026-39696 (CVE-2026-39696). Risk of unauthorized operations or information disclosure.
CVE-2026-39702 Cross-Site Scripting (XSS) in CVE-2026-39702 (CVE-2026-39702)
cross-site scripting in CVE-2026-39702 (CVE-2026-39702). Risk of unauthorized operations or information disclosure.
CVE-2026-39703 Cross-Site Scripting (XSS) in CVE-2026-39703 (CVE-2026-39703)
cross-site scripting in CVE-2026-39703 (CVE-2026-39703). Risk of unauthorized operations or information disclosure.
CVE-2026-39692 Cross-Site Scripting (XSS) in CVE-2026-39692 (CVE-2026-39692)
cross-site scripting in CVE-2026-39692 (CVE-2026-39692). Risk of unauthorized operations or information disclosure.
CVE-2026-39693 Cross-Site Scripting (XSS) in CVE-2026-39693 (CVE-2026-39693)
cross-site scripting in CVE-2026-39693 (CVE-2026-39693). Risk of unauthorized operations or information disclosure.
CVE-2026-39683 Cross-Site Scripting (XSS) in CVE-2026-39683 (CVE-2026-39683)
cross-site scripting in CVE-2026-39683 (CVE-2026-39683). Risk of unauthorized operations or information disclosure.
CVE-2026-39667 Cross-Site Scripting (XSS) in CVE-2026-39667 (CVE-2026-39667)
cross-site scripting in CVE-2026-39667 (CVE-2026-39667). Risk of unauthorized operations or information disclosure.
CVE-2026-39674 Cross-Site Scripting (XSS) in CVE-2026-39674 (CVE-2026-39674)
cross-site scripting in CVE-2026-39674 (CVE-2026-39674). Risk of unauthorized operations or information disclosure.
CVE-2026-39665 Cross-Site Scripting (XSS) in CVE-2026-39665 (CVE-2026-39665)
cross-site scripting in CVE-2026-39665 (CVE-2026-39665). Risk of unauthorized operations or information disclosure.
CVE-2026-39666 Cross-Site Scripting (XSS) in CVE-2026-39666 (CVE-2026-39666)
cross-site scripting in CVE-2026-39666 (CVE-2026-39666). Risk of unauthorized operations or information disclosure.
CVE-2026-39654 Cross-Site Scripting (XSS) in wordpress (CVE-2026-39654)
cross-site scripting in wordpress (CVE-2026-39654). Risk of unauthorized operations or information disclosure.
CVE-2026-39646 Cross-Site Scripting (XSS) in CVE-2026-39646 (CVE-2026-39646)
cross-site scripting in CVE-2026-39646 (CVE-2026-39646). Risk of unauthorized operations or information disclosure.
CVE-2026-39636 Cross-Site Scripting (XSS) in CVE-2026-39636 (CVE-2026-39636)
cross-site scripting in CVE-2026-39636 (CVE-2026-39636). Risk of unauthorized operations or information disclosure.
CVE-2026-39638 Cross-Site Scripting (XSS) in CVE-2026-39638 (CVE-2026-39638)
cross-site scripting in CVE-2026-39638 (CVE-2026-39638). Risk of unauthorized operations or information disclosure.
CVE-2026-39615 Cross-Site Scripting (XSS) in CVE-2026-39615 (CVE-2026-39615)
cross-site scripting in CVE-2026-39615 (CVE-2026-39615). Risk of unauthorized operations or information disclosure.
CVE-2026-39604 Cross-Site Scripting (XSS) in CVE-2026-39604 (CVE-2026-39604)
cross-site scripting in CVE-2026-39604 (CVE-2026-39604). Risk of unauthorized operations or information disclosure.
CVE-2026-39575 Cross-Site Scripting (XSS) in CVE-2026-39575 (CVE-2026-39575)
cross-site scripting in CVE-2026-39575 (CVE-2026-39575). Risk of unauthorized operations or information disclosure.
CVE-2026-39541 Cross-Site Scripting (XSS) in CVE-2026-39541 (CVE-2026-39541)
cross-site scripting in CVE-2026-39541 (CVE-2026-39541). Risk of unauthorized operations or information disclosure.
CVE-2026-39517 Cross-Site Scripting (XSS) in CVE-2026-39517 (CVE-2026-39517)
cross-site scripting in CVE-2026-39517 (CVE-2026-39517). Risk of unauthorized operations or information disclosure.
CVE-2026-39500 Cross-Site Scripting (XSS) in CVE-2026-39500 (CVE-2026-39500)
cross-site scripting in CVE-2026-39500 (CVE-2026-39500). Risk of unauthorized operations or information disclosure.
CVE-2026-39508 Cross-Site Scripting (XSS) in CVE-2026-39508 (CVE-2026-39508)
cross-site scripting in CVE-2026-39508 (CVE-2026-39508). Risk of unauthorized operations or information disclosure.
CVE-2026-39482 Cross-Site Scripting (XSS) in CVE-2026-39482 (CVE-2026-39482)
cross-site scripting in CVE-2026-39482 (CVE-2026-39482). Risk of unauthorized operations or information disclosure.
CVE-2026-39483 Cross-Site Scripting (XSS) in CVE-2026-39483 (CVE-2026-39483)
cross-site scripting in CVE-2026-39483 (CVE-2026-39483). Risk of unauthorized operations or information disclosure.
CVE-2026-1396 Cross-Site Scripting (XSS) in wordpress (CVE-2026-1396)
cross-site scripting in wordpress (CVE-2026-1396). Risk of unauthorized operations or information disclosure.
CVE-2026-4655 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4655)
cross-site scripting in wordpress (CVE-2026-4655). Risk of unauthorized operations or information disclosure.
CVE-2026-5506 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5506)
cross-site scripting in wordpress (CVE-2026-5506). Risk of unauthorized operations or information disclosure. Exploitable via ``wave``.
CVE-2026-5508 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5508)
cross-site scripting in wordpress (CVE-2026-5508). Risk of unauthorized operations or information disclosure. Exploitable via ``wowpress``.
CVE-2026-5169 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5169)
cross-site scripting in wordpress (CVE-2026-5169). Risk of unauthorized operations or information disclosure.
CVE-2026-4871 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4871)
cross-site scripting in wordpress (CVE-2026-4871). Risk of unauthorized operations or information disclosure. Exploitable via ``scm_member_data``.
CVE-2026-3618 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3618)
cross-site scripting in wordpress (CVE-2026-3618). Risk of unauthorized operations or information disclosure.
CVE-2026-2838 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2838)
cross-site scripting in wordpress (CVE-2026-2838). Risk of unauthorized operations or information disclosure.
CVE-2026-3142 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3142)
cross-site scripting in wordpress (CVE-2026-3142). Risk of unauthorized operations or information disclosure.
CVE-2025-1794 Cross-Site Scripting (XSS) in wordpress (CVE-2025-1794)
cross-site scripting in wordpress (CVE-2025-1794). Risk of unauthorized operations or information disclosure.
CVE-2026-27787 Cross-Site Scripting (XSS) in icz (CVE-2026-27787)
cross-site scripting in icz (CVE-2026-27787). Risk of unauthorized operations or information disclosure.
CVE-2026-4333 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4333)
cross-site scripting in wordpress (CVE-2026-4333). Risk of unauthorized operations or information disclosure.
CVE-2026-4341 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4341)
cross-site scripting in wordpress (CVE-2026-4341). Risk of unauthorized operations or information disclosure. Exploitable via ``follow_us_text``.
CVE-2026-4785 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4785)
cross-site scripting in wordpress (CVE-2026-4785). Risk of unauthorized operations or information disclosure.
CVE-2026-3513 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3513)
cross-site scripting in wordpress (CVE-2026-3513). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →