Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: xss Clear
ID Title
CVE-2026-40126 Cross-Site Scripting (XSS) in CVE-2026-40126 (CVE-2026-40126)
cross-site scripting in CVE-2026-40126 (CVE-2026-40126). Risk of unauthorized operations or information disclosure.
CVE-2026-74800 Cross-Site Scripting (XSS) in CVE-2026-74800 (CVE-2026-74800)
cross-site scripting in CVE-2026-74800 (CVE-2026-74800). Successful exploitation can lead to full system takeover.
CVE-2026-19995 Cross-Site Scripting (XSS) in CVE-2026-19995 (CVE-2026-19995)
cross-site scripting in CVE-2026-19995 (CVE-2026-19995). Risk of unauthorized operations or information disclosure.
CVE-2026-19998 Cross-Site Scripting (XSS) in CVE-2026-19998 (CVE-2026-19998)
cross-site scripting in CVE-2026-19998 (CVE-2026-19998). Risk of unauthorized operations or information disclosure.
CVE-2026-71368 Cross-Site Scripting (XSS) in jvn (CVE-2026-71368)
cross-site scripting in jvn (CVE-2026-71368). Risk of unauthorized operations or information disclosure.
CVE-2026-19988 Vulnerability in CVE-2026-19988 (CVE-2026-19988)
vulnerability in CVE-2026-19988 (CVE-2026-19988). Risk of unauthorized operations or information disclosure.
CVE-2026-10734 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10734)
cross-site scripting in wordpress (CVE-2026-10734). Risk of unauthorized operations or information disclosure.
CVE-2026-13424 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13424)
cross-site scripting in wordpress (CVE-2026-13424). Risk of unauthorized operations or information disclosure.
CVE-2026-2357 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2357)
cross-site scripting in wordpress (CVE-2026-2357). Risk of unauthorized operations or information disclosure.
CVE-2026-18402 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18402)
cross-site scripting in wordpress (CVE-2026-18402). Risk of unauthorized operations or information disclosure.
CVE-2026-19712 Cross-Site Scripting (XSS) in wordpress (CVE-2026-19712)
cross-site scripting in wordpress (CVE-2026-19712). Risk of unauthorized operations or information disclosure.
CVE-2026-15726 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15726)
cross-site scripting in wordpress (CVE-2026-15726). Risk of unauthorized operations or information disclosure.
CVE-2026-15604 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15604)
cross-site scripting in wordpress (CVE-2026-15604). Risk of unauthorized operations or information disclosure.
CVE-2026-15790 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15790)
cross-site scripting in wordpress (CVE-2026-15790). Risk of unauthorized operations or information disclosure.
CVE-2026-16758 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16758)
cross-site scripting in wordpress (CVE-2026-16758). Risk of unauthorized operations or information disclosure.
CVE-2026-16775 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16775)
cross-site scripting in wordpress (CVE-2026-16775). Risk of unauthorized operations or information disclosure.
CVE-2026-15066 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15066)
cross-site scripting in wordpress (CVE-2026-15066). Risk of unauthorized operations or information disclosure.
CVE-2026-15009 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15009)
cross-site scripting in wordpress (CVE-2026-15009). Risk of unauthorized operations or information disclosure.
CVE-2026-15002 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15002)
cross-site scripting in wordpress (CVE-2026-15002). Risk of unauthorized operations or information disclosure.
CVE-2026-12477 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12477)
cross-site scripting in wordpress (CVE-2026-12477). Risk of unauthorized operations or information disclosure.
CVE-2026-11780 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11780)
cross-site scripting in wordpress (CVE-2026-11780). Risk of unauthorized operations or information disclosure.
CVE-2026-2487 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2487)
cross-site scripting in wordpress (CVE-2026-2487). Risk of unauthorized operations or information disclosure.
CVE-2026-19922 Cross-Site Scripting (XSS) in CVE-2026-19922 (CVE-2026-19922)
cross-site scripting in CVE-2026-19922 (CVE-2026-19922). Risk of unauthorized operations or information disclosure.
CVE-2026-73053 Cross-Site Scripting (XSS) in CVE-2026-73053 (CVE-2026-73053)
cross-site scripting in CVE-2026-73053 (CVE-2026-73053). Successful exploitation can lead to full system takeover.
CVE-2026-73044 Cross-Site Scripting (XSS) in CVE-2026-73044 (CVE-2026-73044)
cross-site scripting in CVE-2026-73044 (CVE-2026-73044). Successful exploitation can lead to full system takeover.
CVE-2026-73050 Cross-Site Scripting (XSS) in CVE-2026-73050 (CVE-2026-73050)
cross-site scripting in CVE-2026-73050 (CVE-2026-73050). Successful exploitation can lead to full system takeover.
CVE-2026-19916 Cross-Site Scripting (XSS) in CVE-2026-19916 (CVE-2026-19916)
cross-site scripting in CVE-2026-19916 (CVE-2026-19916). Risk of unauthorized operations or information disclosure.
CVE-2026-19904 Cross-Site Scripting (XSS) in CVE-2026-19904 (CVE-2026-19904)
cross-site scripting in CVE-2026-19904 (CVE-2026-19904). Risk of unauthorized operations or information disclosure.
CVE-2026-17090 Cross-Site Scripting (XSS) in wordpress (CVE-2026-17090)
cross-site scripting in wordpress (CVE-2026-17090). Risk of unauthorized operations or information disclosure.
CVE-2026-16145 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16145)
cross-site scripting in wordpress (CVE-2026-16145). Risk of unauthorized operations or information disclosure.
CVE-2026-15948 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15948)
cross-site scripting in wordpress (CVE-2026-15948). Risk of unauthorized operations or information disclosure.
CVE-2026-13360 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13360)
cross-site scripting in wordpress (CVE-2026-13360). Risk of unauthorized operations or information disclosure.
CVE-2026-14433 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14433)
cross-site scripting in wordpress (CVE-2026-14433). Risk of unauthorized operations or information disclosure.
CVE-2026-17209 Cross-Site Scripting (XSS) in ibm (CVE-2026-17209)
cross-site scripting in ibm (CVE-2026-17209). Data can be tampered with by attackers.
CVE-2026-63361 Cross-Site Scripting (XSS) in CVE-2026-63361 (CVE-2026-63361)
cross-site scripting in CVE-2026-63361 (CVE-2026-63361). Risk of unauthorized operations or information disclosure.
CVE-2026-53472 Cross-Site Scripting (XSS) in CVE-2026-53472 (CVE-2026-53472)
cross-site scripting in CVE-2026-53472 (CVE-2026-53472). Confidential information can be exposed externally. Exploitable via ``AgentStatusUpdate.CredentialUrl``.
CVE-2026-72832 Cross-Site Scripting (XSS) in CVE-2026-72832 (CVE-2026-72832)
cross-site scripting in CVE-2026-72832 (CVE-2026-72832). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.13` or later.
CVE-2026-72821 Cross-Site Scripting (XSS) in CVE-2026-72821 (CVE-2026-72821)
cross-site scripting in CVE-2026-72821 (CVE-2026-72821). Risk of unauthorized operations or information disclosure.
CVE-2026-19794 The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...
The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...
CVE-2026-18109 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18109)
cross-site scripting in wordpress (CVE-2026-18109). Risk of unauthorized operations or information disclosure.
CVE-2026-56858 Cross-Site Scripting (XSS) in CVE-2026-56858 (CVE-2026-56858)
cross-site scripting in CVE-2026-56858 (CVE-2026-56858). Risk of unauthorized operations or information disclosure.
CVE-2026-18741 Cross-Site Scripting (XSS) in CVE-2026-18741 (CVE-2026-18741)
cross-site scripting in CVE-2026-18741 (CVE-2026-18741). Risk of unauthorized operations or information disclosure.
CVE-2026-73531 Cross-Site Scripting (XSS) in django (CVE-2026-73531)
cross-site scripting in django (CVE-2026-73531). Risk of unauthorized operations or information disclosure.
CVE-2026-73038 Cross-Site Scripting (XSS) in CVE-2026-73038 (CVE-2026-73038)
cross-site scripting in CVE-2026-73038 (CVE-2026-73038). Risk of unauthorized operations or information disclosure.
CVE-2026-73037 Cross-Site Scripting (XSS) in CVE-2026-73037 (CVE-2026-73037)
cross-site scripting in CVE-2026-73037 (CVE-2026-73037). Risk of unauthorized operations or information disclosure.
CVE-2026-34491 Cross-Site Scripting (XSS) in cisa (CVE-2026-34491)
cross-site scripting in cisa (CVE-2026-34491). Risk of unauthorized operations or information disclosure.
CVE-2026-73572 Cross-Site Scripting (XSS) in synacor (CVE-2026-73572)
cross-site scripting in synacor (CVE-2026-73572). Risk of unauthorized operations or information disclosure.
CVE-2026-19744 Cross-Site Scripting (XSS) in CVE-2026-19744 (CVE-2026-19744)
cross-site scripting in CVE-2026-19744 (CVE-2026-19744). Risk of unauthorized operations or information disclosure.
CVE-2026-28154 Cross-Site Scripting (XSS) in wordpress (CVE-2026-28154)
cross-site scripting in wordpress (CVE-2026-28154). Risk of unauthorized operations or information disclosure.
CVE-2026-73357 Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.
Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →