Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-70588 |
|
Cross-Site Scripting (XSS) in ghost (CVE-2026-70588)
cross-site scripting in ghost (CVE-2026-70588). Data can be tampered with by attackers. Mitigation: upgrade to `6.54.1` or later.
|
| CVE-2026-66300 |
|
Cross-Site Scripting (XSS) in CVE-2026-66300 (CVE-2026-66300)
cross-site scripting in CVE-2026-66300 (CVE-2026-66300). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.12.2` or later.
|
| CVE-2026-15920 |
|
Vulnerability in django (CVE-2026-15920)
vulnerability in django (CVE-2026-15920). Risk of unauthorized operations or information disclosure. Exploitable via ``URLField``.
|
| CVE-2026-10032 |
|
Cross-Site Scripting (XSS) in CVE-2026-10032 (CVE-2026-10032)
cross-site scripting in CVE-2026-10032 (CVE-2026-10032). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67196 |
|
Cross-Site Scripting (XSS) in CVE-2026-67196 (CVE-2026-67196)
cross-site scripting in CVE-2026-67196 (CVE-2026-67196). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14337 |
|
Cross-Site Scripting (XSS) in CVE-2026-14337 (CVE-2026-14337)
cross-site scripting in CVE-2026-14337 (CVE-2026-14337). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14192 |
|
Cross-Site Scripting (XSS) in CVE-2026-14192 (CVE-2026-14192)
cross-site scripting in CVE-2026-14192 (CVE-2026-14192). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16548 |
|
Unrestricted File Upload in wordpress (CVE-2026-16548)
vulnerability in wordpress (CVE-2026-16548). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16293 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16293)
cross-site scripting in wordpress (CVE-2026-16293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67617 |
|
Cross-Site Scripting (XSS) in csrf (CVE-2026-67617)
cross-site scripting in csrf (CVE-2026-67617). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/save_content_admin`.
|
| CVE-2026-18682 |
|
Cross-Site Scripting (XSS) in CVE-2026-18682 (CVE-2026-18682)
cross-site scripting in CVE-2026-18682 (CVE-2026-18682). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52520 |
|
Cross-Site Scripting (XSS) in CVE-2026-52520 (CVE-2026-52520)
cross-site scripting in CVE-2026-52520 (CVE-2026-52520). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49131 |
|
Cross-Site Scripting (XSS) in CVE-2026-49131 (CVE-2026-49131)
cross-site scripting in CVE-2026-49131 (CVE-2026-49131). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49132 |
|
Cross-Site Scripting (XSS) in CVE-2026-49132 (CVE-2026-49132)
cross-site scripting in CVE-2026-49132 (CVE-2026-49132). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66296 |
|
Cross-Site Scripting (XSS) in lud (CVE-2026-66296)
cross-site scripting in lud (CVE-2026-66296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38444 |
|
Cross-Site Scripting (XSS) in CVE-2026-38444 (CVE-2026-38444)
cross-site scripting in CVE-2026-38444 (CVE-2026-38444). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38446 |
|
Cross-Site Scripting (XSS) in CVE-2026-38446 (CVE-2026-38446)
cross-site scripting in CVE-2026-38446 (CVE-2026-38446). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67612 |
|
Cross-Site Scripting (XSS) in CVE-2026-67612 (CVE-2026-67612)
cross-site scripting in CVE-2026-67612 (CVE-2026-67612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18243 |
|
Cross-Site Scripting (XSS) in CVE-2026-18243 (CVE-2026-18243)
cross-site scripting in CVE-2026-18243 (CVE-2026-18243). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-69149 |
|
Cross-Site Scripting (XSS) in @angular/platform-server (CVE-2026-69149)
cross-site scripting in @angular/platform-server (CVE-2026-69149). Risk of unauthorized operations or information disclosure. Exploitable via ``domino``.
|
| CVE-2026-69092 |
|
Cross-Site Scripting (XSS) in CVE-2026-69092 (CVE-2026-69092)
cross-site scripting in CVE-2026-69092 (CVE-2026-69092). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-69075 |
|
Cross-Site Scripting (XSS) in vue (CVE-2026-69075)
cross-site scripting in vue (CVE-2026-69075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57279 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2026-57279)
cross-site scripting in jvn (CVE-2026-57279). Data can be tampered with by attackers.
|
| CVE-2026-68583 |
|
Cross-Site Scripting (XSS) in CVE-2026-68583 (CVE-2026-68583)
cross-site scripting in CVE-2026-68583 (CVE-2026-68583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12231 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12231)
cross-site scripting in wordpress (CVE-2026-12231). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14864 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14864)
cross-site scripting in wordpress (CVE-2026-14864). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15675 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-15675)
cross-site scripting in wordpress (CVE-2025-15675). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67352 |
|
Cross-Site Scripting (XSS) in CVE-2026-67352 (CVE-2026-67352)
cross-site scripting in CVE-2026-67352 (CVE-2026-67352). Confidential information can be exposed externally.
|
| CVE-2026-67338 |
|
Vulnerability in CVE-2026-67338 (CVE-2026-67338)
vulnerability in CVE-2026-67338 (CVE-2026-67338). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67328 |
|
Cross-Site Scripting (XSS) in CVE-2026-67328 (CVE-2026-67328)
cross-site scripting in CVE-2026-67328 (CVE-2026-67328). Confidential information can be exposed externally.
|
| CVE-2025-71404 |
|
Cross-Site Scripting (XSS) in CVE-2025-71404 (CVE-2025-71404)
cross-site scripting in CVE-2025-71404 (CVE-2025-71404). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18435 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18435)
cross-site scripting in wordpress (CVE-2026-18435). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18344 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18344)
cross-site scripting in wordpress (CVE-2026-18344). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18062 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18062)
cross-site scripting in wordpress (CVE-2026-18062). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17571 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17571)
cross-site scripting in wordpress (CVE-2026-17571). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16685 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16685)
cross-site scripting in wordpress (CVE-2026-16685). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16684 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16684)
cross-site scripting in wordpress (CVE-2026-16684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16091 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16091)
cross-site scripting in wordpress (CVE-2026-16091). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16090 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16090)
cross-site scripting in wordpress (CVE-2026-16090). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15662 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15662)
cross-site scripting in wordpress (CVE-2026-15662). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15644 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15644)
cross-site scripting in wordpress (CVE-2026-15644). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15649 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15649)
cross-site scripting in wordpress (CVE-2026-15649). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15645 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15645)
cross-site scripting in wordpress (CVE-2026-15645). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15950 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15950)
cross-site scripting in wordpress (CVE-2026-15950). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13458 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13458)
cross-site scripting in wordpress (CVE-2026-13458). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15052 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15052)
cross-site scripting in wordpress (CVE-2026-15052). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13725 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13725)
cross-site scripting in wordpress (CVE-2026-13725). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7623 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7623)
cross-site scripting in wordpress (CVE-2026-7623). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13362 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13362)
cross-site scripting in wordpress (CVE-2026-13362). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52232 |
|
Cross-Site Scripting (XSS) in CVE-2026-52232 (CVE-2026-52232)
cross-site scripting in CVE-2026-52232 (CVE-2026-52232). Risk of unauthorized operations or information disclosure.
|