Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Tag: xss Clear
ID Title
CVE-2026-50980 Vulnerability in CVE-2026-50980 (CVE-2026-50980)
vulnerability in CVE-2026-50980 (CVE-2026-50980). Risk of unauthorized operations or information disclosure.
CVE-2026-38725 Cross-Site Scripting (XSS) in CVE-2026-38725 (CVE-2026-38725)
cross-site scripting in CVE-2026-38725 (CVE-2026-38725). Risk of unauthorized operations or information disclosure.
CVE-2026-6286 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6286)
cross-site scripting in wordpress (CVE-2026-6286). Risk of unauthorized operations or information disclosure.
CVE-2026-82090 Cross-Site Scripting (XSS) in CVE-2026-82090 (CVE-2026-82090)
cross-site scripting in CVE-2026-82090 (CVE-2026-82090). Risk of unauthorized operations or information disclosure.
CVE-2026-18983 Unrestricted File Upload in wordpress (CVE-2026-18983)
vulnerability in wordpress (CVE-2026-18983). Successful exploitation can lead to full system takeover.
CVE-2026-78615 Cross-Site Scripting (XSS) in CVE-2026-78615 (CVE-2026-78615)
cross-site scripting in CVE-2026-78615 (CVE-2026-78615). Risk of unauthorized operations or information disclosure.
CVE-2026-78616 Cross-Site Scripting (XSS) in CVE-2026-78616 (CVE-2026-78616)
cross-site scripting in CVE-2026-78616 (CVE-2026-78616). Risk of unauthorized operations or information disclosure.
CVE-2026-78195 Cross-Site Scripting (XSS) in CVE-2026-78195 (CVE-2026-78195)
cross-site scripting in CVE-2026-78195 (CVE-2026-78195). Risk of unauthorized operations or information disclosure.
CVE-2026-78047 Cross-Site Scripting (XSS) in CVE-2026-78047 (CVE-2026-78047)
cross-site scripting in CVE-2026-78047 (CVE-2026-78047). Risk of unauthorized operations or information disclosure.
CVE-2026-81731 Cross-Site Scripting (XSS) in CVE-2026-81731 (CVE-2026-81731)
cross-site scripting in CVE-2026-81731 (CVE-2026-81731). Risk of unauthorized operations or information disclosure.
CVE-2026-59281 Cross-Site Scripting (XSS) in spring (CVE-2026-59281)
cross-site scripting in spring (CVE-2026-59281). Risk of unauthorized operations or information disclosure.
CVE-2026-53579 Cross-Site Scripting (XSS) in CVE-2026-53579 (CVE-2026-53579)
cross-site scripting in CVE-2026-53579 (CVE-2026-53579). Risk of unauthorized operations or information disclosure.
CVE-2026-53578 Cross-Site Scripting (XSS) in CVE-2026-53578 (CVE-2026-53578)
cross-site scripting in CVE-2026-53578 (CVE-2026-53578). Risk of unauthorized operations or information disclosure.
CVE-2026-48996 Cross-Site Scripting (XSS) in CVE-2026-48996 (CVE-2026-48996)
cross-site scripting in CVE-2026-48996 (CVE-2026-48996). Risk of unauthorized operations or information disclosure.
CVE-2026-77989 Cross-Site Scripting (XSS) in csharp (CVE-2026-77989)
cross-site scripting in csharp (CVE-2026-77989). Risk of unauthorized operations or information disclosure.
CVE-2026-47666 Cross-Site Scripting (XSS) in CVE-2026-47666 (CVE-2026-47666)
cross-site scripting in CVE-2026-47666 (CVE-2026-47666). Confidential information can be exposed externally.
CVE-2026-75331 Unrestricted File Upload in CVE-2026-75331 (CVE-2026-75331)
vulnerability in CVE-2026-75331 (CVE-2026-75331). Risk of unauthorized operations or information disclosure.
CVE-2026-16809 Cross-Site Scripting (XSS) in CVE-2026-16809 (CVE-2026-16809)
cross-site scripting in CVE-2026-16809 (CVE-2026-16809). Risk of unauthorized operations or information disclosure.
CVE-2026-15973 Cross-Site Scripting (XSS) in c (CVE-2026-15973)
cross-site scripting in c (CVE-2026-15973). Risk of unauthorized operations or information disclosure.
CVE-2026-39275 Cross-Site Scripting (XSS) in CVE-2026-39275 (CVE-2026-39275)
cross-site scripting in CVE-2026-39275 (CVE-2026-39275). Risk of unauthorized operations or information disclosure.
CVE-2026-54606 Cross-Site Scripting (XSS) in suneditor (CVE-2026-54606)
cross-site scripting in suneditor (CVE-2026-54606). Risk of unauthorized operations or information disclosure. Exploitable via `GET /poc.js`. Mitigation: upgrade to `3.1.4` or later.
CVE-2026-18331 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18331)
cross-site scripting in wordpress (CVE-2026-18331). Risk of unauthorized operations or information disclosure.
CVE-2026-19760 Cross-Site Scripting (XSS) in wordpress (CVE-2026-19760)
cross-site scripting in wordpress (CVE-2026-19760). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-38472 Vulnerability in c (CVE-2026-38472)
vulnerability in c (CVE-2026-38472). Risk of unauthorized operations or information disclosure.
CVE-2026-38469 Vulnerability in CVE-2026-38469 (CVE-2026-38469)
vulnerability in CVE-2026-38469 (CVE-2026-38469). Risk of unauthorized operations or information disclosure.
CVE-2026-38473 Vulnerability in CVE-2026-38473 (CVE-2026-38473)
vulnerability in CVE-2026-38473 (CVE-2026-38473). Risk of unauthorized operations or information disclosure.
CVE-2026-38466 Vulnerability in CVE-2026-38466 (CVE-2026-38466)
vulnerability in CVE-2026-38466 (CVE-2026-38466). Risk of unauthorized operations or information disclosure.
CVE-2026-38465 Vulnerability in CVE-2026-38465 (CVE-2026-38465)
vulnerability in CVE-2026-38465 (CVE-2026-38465). Risk of unauthorized operations or information disclosure.
CVE-2026-79793 Cross-Site Scripting (XSS) in CVE-2026-79793 (CVE-2026-79793)
cross-site scripting in CVE-2026-79793 (CVE-2026-79793). Risk of unauthorized operations or information disclosure.
CVE-2026-79670 Unrestricted File Upload in CVE-2026-79670 (CVE-2026-79670)
vulnerability in CVE-2026-79670 (CVE-2026-79670). Risk of unauthorized operations or information disclosure.
CVE-2026-79663 Cross-Site Scripting (XSS) in c (CVE-2026-79663)
cross-site scripting in c (CVE-2026-79663). Risk of unauthorized operations or information disclosure.
CVE-2026-18547 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18547)
cross-site scripting in wordpress (CVE-2026-18547). Risk of unauthorized operations or information disclosure.
CVE-2026-16231 Cross-Site Scripting (XSS) in express (CVE-2026-16231)
cross-site scripting in express (CVE-2026-16231). Confidential information can be exposed externally. Mitigation: upgrade to `4.3.0` or later.
CVE-2026-18328 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-18323 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-18100 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18100)
cross-site scripting in wordpress (CVE-2026-18100). Risk of unauthorized operations or information disclosure.
CVE-2026-56706 Vulnerability in csrf (CVE-2026-56706)
vulnerability in csrf (CVE-2026-56706). Data can be tampered with by attackers.
CVE-2026-71503 Cross-Site Scripting (XSS) in CVE-2026-71503 (CVE-2026-71503)
cross-site scripting in CVE-2026-71503 (CVE-2026-71503). Risk of unauthorized operations or information disclosure.
CVE-2026-78391 Cross-Site Scripting (XSS) in CVE-2026-78391 (CVE-2026-78391)
cross-site scripting in CVE-2026-78391 (CVE-2026-78391). Risk of unauthorized operations or information disclosure.
CVE-2026-78414 Cross-Site Scripting (XSS) in CVE-2026-78414 (CVE-2026-78414)
cross-site scripting in CVE-2026-78414 (CVE-2026-78414). Successful exploitation can lead to full system takeover.
CVE-2026-78213 Cross-Site Scripting (XSS) in CVE-2026-78213 (CVE-2026-78213)
cross-site scripting in CVE-2026-78213 (CVE-2026-78213). Confidential information can be exposed externally.
CVE-2026-78060 Cross-Site Scripting (XSS) in CVE-2026-78060 (CVE-2026-78060)
cross-site scripting in CVE-2026-78060 (CVE-2026-78060). Risk of unauthorized operations or information disclosure.
CVE-2026-78059 Cross-Site Scripting (XSS) in CVE-2026-78059 (CVE-2026-78059)
cross-site scripting in CVE-2026-78059 (CVE-2026-78059). Risk of unauthorized operations or information disclosure.
CVE-2026-78055 Cross-Site Scripting (XSS) in CVE-2026-78055 (CVE-2026-78055)
cross-site scripting in CVE-2026-78055 (CVE-2026-78055). Risk of unauthorized operations or information disclosure.
CVE-2026-78054 Cross-Site Scripting (XSS) in CVE-2026-78054 (CVE-2026-78054)
cross-site scripting in CVE-2026-78054 (CVE-2026-78054). Risk of unauthorized operations or information disclosure.
CVE-2026-66917 Cross-Site Scripting (XSS) in csharp (CVE-2026-66917)
cross-site scripting in csharp (CVE-2026-66917). Risk of unauthorized operations or information disclosure.
CVE-2026-53529 Cross-Site Scripting (XSS) in CVE-2026-53529 (CVE-2026-53529)
cross-site scripting in CVE-2026-53529 (CVE-2026-53529). Risk of unauthorized operations or information disclosure.
CVE-2026-69234 Cross-Site Scripting (XSS) in CVE-2026-69234 (CVE-2026-69234)
cross-site scripting in CVE-2026-69234 (CVE-2026-69234). Risk of unauthorized operations or information disclosure.
CVE-2026-69236 Cross-Site Scripting (XSS) in CVE-2026-69236 (CVE-2026-69236)
cross-site scripting in CVE-2026-69236 (CVE-2026-69236). Risk of unauthorized operations or information disclosure.
CVE-2026-69231 Cross-Site Scripting (XSS) in CVE-2026-69231 (CVE-2026-69231)
cross-site scripting in CVE-2026-69231 (CVE-2026-69231). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →