Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-79 Clear
ID Title
CVE-2026-2737 Cross-Site Scripting (XSS) in progress (CVE-2026-2737)
cross-site scripting in progress (CVE-2026-2737). Risk of unauthorized operations or information disclosure.
CVE-2026-20090 Cross-Site Scripting (XSS) in cisco (CVE-2026-20090)
cross-site scripting in cisco (CVE-2026-20090). Risk of unauthorized operations or information disclosure.
CVE-2026-20088 Cross-Site Scripting (XSS) in cisco (CVE-2026-20088)
cross-site scripting in cisco (CVE-2026-20088). Risk of unauthorized operations or information disclosure.
CVE-2026-20089 Cross-Site Scripting (XSS) in cisco (CVE-2026-20089)
cross-site scripting in cisco (CVE-2026-20089). Risk of unauthorized operations or information disclosure.
CVE-2026-20087 Cross-Site Scripting (XSS) in cisco (CVE-2026-20087)
cross-site scripting in cisco (CVE-2026-20087). Risk of unauthorized operations or information disclosure.
CVE-2026-30526 Cross-Site Scripting (XSS) in pushpam02 (CVE-2026-30526)
cross-site scripting in pushpam02 (CVE-2026-30526). Risk of unauthorized operations or information disclosure.
CVE-2026-29598 Cross-Site Scripting (XSS) in CVE-2026-29598 (CVE-2026-29598)
cross-site scripting in CVE-2026-29598 (CVE-2026-29598). Risk of unauthorized operations or information disclosure.
CVE-2026-34448 Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-34448)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-34448). Successful exploitation can lead to full system takeover. Exploitable via ``mAsse``. Mitigation: upgrade to `3.6.2` or later.
CVE-2026-34405 Cross-Site Scripting (XSS) in vue (CVE-2026-34405)
cross-site scripting in vue (CVE-2026-34405). Risk of unauthorized operations or information disclosure.
CVE-2026-34739 Cross-Site Scripting (XSS) in wwbn (CVE-2026-34739)
cross-site scripting in wwbn (CVE-2026-34739). Risk of unauthorized operations or information disclosure.
CVE-2026-3468 Cross-Site Scripting (XSS) in sonicwall (CVE-2026-3468)
cross-site scripting in sonicwall (CVE-2026-3468). Risk of unauthorized operations or information disclosure.
CVE-2026-34716 Cross-Site Scripting (XSS) in wwbn (CVE-2026-34716)
cross-site scripting in wwbn (CVE-2026-34716). Risk of unauthorized operations or information disclosure.
CVE-2026-34396 Cross-Site Scripting (XSS) in csrf (CVE-2026-34396)
cross-site scripting in csrf (CVE-2026-34396). Risk of unauthorized operations or information disclosure.
CVE-2026-34206 Cross-Site Scripting (XSS) in libops (CVE-2026-34206)
cross-site scripting in libops (CVE-2026-34206). Risk of unauthorized operations or information disclosure.
CVE-2026-5209 Cross-Site Scripting (XSS) in CVE-2026-5209 (CVE-2026-5209)
cross-site scripting in CVE-2026-5209 (CVE-2026-5209). Risk of unauthorized operations or information disclosure.
CVE-2026-32607 Cross-Site Scripting (XSS) in discourse (CVE-2026-32607)
cross-site scripting in discourse (CVE-2026-32607). Risk of unauthorized operations or information disclosure.
CVE-2026-32243 Cross-Site Scripting (XSS) in discourse (CVE-2026-32243)
cross-site scripting in discourse (CVE-2026-32243). Risk of unauthorized operations or information disclosure.
CVE-2026-32273 Cross-Site Scripting (XSS) in discourse (CVE-2026-32273)
cross-site scripting in discourse (CVE-2026-32273). Risk of unauthorized operations or information disclosure.
CVE-2025-62184 Cross-Site Scripting (XSS) in pega (CVE-2025-62184)
cross-site scripting in pega (CVE-2025-62184). Risk of unauthorized operations or information disclosure.
CVE-2026-34231 Cross-Site Scripting (XSS) in django (CVE-2026-34231)
cross-site scripting in django (CVE-2026-34231). Risk of unauthorized operations or information disclosure.
CVE-2026-33276 Cross-Site Scripting (XSS) in checkmk (CVE-2026-33276)
cross-site scripting in checkmk (CVE-2026-33276). Risk of unauthorized operations or information disclosure.
CVE-2026-20915 Cross-Site Scripting (XSS) in checkmk (CVE-2026-20915)
cross-site scripting in checkmk (CVE-2026-20915). Risk of unauthorized operations or information disclosure.
CVE-2026-4267 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4267)
cross-site scripting in wordpress (CVE-2026-4267). Risk of unauthorized operations or information disclosure.
CVE-2026-30082 Cross-Site Scripting (XSS) in CVE-2026-30082 (CVE-2026-30082)
cross-site scripting in CVE-2026-30082 (CVE-2026-30082). Risk of unauthorized operations or information disclosure.
CVE-2026-73427 Cross-Site Scripting (XSS) in trix (CVE-2026-73427)
cross-site scripting in trix (CVE-2026-73427). Risk of unauthorized operations or information disclosure. Exploitable via ``StringPiece.fromJSON``. Mitigation: upgrade to `2.1.18` or later.
CVE-2026-33941 Cross-Site Scripting (XSS) in handlebarsjs (CVE-2026-33941)
cross-site scripting in handlebarsjs (CVE-2026-33941). Successful exploitation can lead to full system takeover.
CVE-2026-65914 Cross-Site Scripting (XSS) in dompurify (CVE-2026-65914)
cross-site scripting in dompurify (CVE-2026-65914). Risk of unauthorized operations or information disclosure. Exploitable via `POST /sanitize`. Mitigation: upgrade to `3.3.2` or later.
CVE-2026-30567 Cross-Site Scripting (XSS) in ahsanriaz26gmailcom (CVE-2026-30567)
cross-site scripting in ahsanriaz26gmailcom (CVE-2026-30567). Risk of unauthorized operations or information disclosure.
CVE-2026-56358 Cross-Site Scripting (XSS) in n8n (CVE-2026-56358)
cross-site scripting in n8n (CVE-2026-56358). Risk of unauthorized operations or information disclosure. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `1.123.25` or later.
CVE-2026-5010 Cross-Site Scripting (XSS) in CVE-2026-5010 (CVE-2026-5010)
cross-site scripting in CVE-2026-5010 (CVE-2026-5010). Risk of unauthorized operations or information disclosure.
CVE-2026-33758 Vulnerability in openbao (CVE-2026-33758)
vulnerability in openbao (CVE-2026-33758). Risk of unauthorized operations or information disclosure. Exploitable via ``error_description``.
CVE-2025-61190 Cross-Site Scripting (XSS) in lyrasis (CVE-2025-61190)
cross-site scripting in lyrasis (CVE-2025-61190). Risk of unauthorized operations or information disclosure.
CVE-2026-32859 Cross-Site Scripting (XSS) in CVE-2026-32859 (CVE-2026-32859)
cross-site scripting in CVE-2026-32859 (CVE-2026-32859). Risk of unauthorized operations or information disclosure.
CVE-2026-3457 Cross-Site Scripting (XSS) in CVE-2026-3457 (CVE-2026-3457)
cross-site scripting in CVE-2026-3457 (CVE-2026-3457). Data can be tampered with by attackers.
CVE-2026-33559 Cross-Site Scripting (XSS) in wordpress (CVE-2026-33559)
cross-site scripting in wordpress (CVE-2026-33559). Risk of unauthorized operations or information disclosure.
CVE-2026-34071 Cross-Site Scripting (XSS) in stirling (CVE-2026-34071)
cross-site scripting in stirling (CVE-2026-34071). Risk of unauthorized operations or information disclosure.
CVE-2026-29934 Cross-Site Scripting (XSS) in lightcms-project (CVE-2026-29934)
cross-site scripting in lightcms-project (CVE-2026-29934). Risk of unauthorized operations or information disclosure.
CVE-2026-1001 Cross-Site Scripting (XSS) in domoticz (CVE-2026-1001)
cross-site scripting in domoticz (CVE-2026-1001). Risk of unauthorized operations or information disclosure.
CVE-2026-30587 Cross-Site Scripting (XSS) in seafile (CVE-2026-30587)
cross-site scripting in seafile (CVE-2026-30587). Confidential information can be exposed externally. Mitigation: upgrade to `13.0.17` or later.
CVE-2026-2072 Cross-Site Scripting (XSS) in hitachi (CVE-2026-2072)
cross-site scripting in hitachi (CVE-2026-2072). Confidential information can be exposed externally.
CVE-2026-28861 Cross-Site Scripting (XSS) in apple (CVE-2026-28861)
cross-site scripting in apple (CVE-2026-28861). Risk of unauthorized operations or information disclosure.
CVE-2026-33331 Cross-Site Scripting (XSS) in orpc (CVE-2026-33331)
cross-site scripting in orpc (CVE-2026-33331). Confidential information can be exposed externally.
CVE-2026-33167 Cross-Site Scripting (XSS) in actionpack (CVE-2026-33167)
cross-site scripting in actionpack (CVE-2026-33167). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.1.2.1` or later.
CVE-2026-32851 Cross-Site Scripting (XSS) in mailenable (CVE-2026-32851)
cross-site scripting in mailenable (CVE-2026-32851). Risk of unauthorized operations or information disclosure.
CVE-2025-52204 Cross-Site Scripting (XSS) in CVE-2025-52204 (CVE-2025-52204)
cross-site scripting in CVE-2025-52204 (CVE-2025-52204). Risk of unauthorized operations or information disclosure.
CVE-2025-63260 Cross-Site Scripting (XSS) in syncfusion (CVE-2025-63260)
cross-site scripting in syncfusion (CVE-2025-63260). Risk of unauthorized operations or information disclosure.
CVE-2026-22895 Cross-Site Scripting (XSS) in qnap (CVE-2026-22895)
cross-site scripting in qnap (CVE-2026-22895). Risk of unauthorized operations or information disclosure.
CVE-2026-32843 Cross-Site Scripting (XSS) in CVE-2026-32843 (CVE-2026-32843)
cross-site scripting in CVE-2026-32843 (CVE-2026-32843). Risk of unauthorized operations or information disclosure.
CVE-2026-30695 Cross-Site Scripting (XSS) in CVE-2026-30695 (CVE-2026-30695)
cross-site scripting in CVE-2026-30695 (CVE-2026-30695). Risk of unauthorized operations or information disclosure.
CVE-2026-31938 Cross-Site Scripting (XSS) in parall (CVE-2026-31938)
cross-site scripting in parall (CVE-2026-31938). Confidential information can be exposed externally. Exploitable via ``options``.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →