Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: xss Clear
ID Title
CVE-2026-70588 Cross-Site Scripting (XSS) in ghost (CVE-2026-70588)
cross-site scripting in ghost (CVE-2026-70588). Data can be tampered with by attackers. Mitigation: upgrade to `6.54.1` or later.
CVE-2026-66300 Cross-Site Scripting (XSS) in CVE-2026-66300 (CVE-2026-66300)
cross-site scripting in CVE-2026-66300 (CVE-2026-66300). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.12.2` or later.
CVE-2026-15920 Vulnerability in django (CVE-2026-15920)
vulnerability in django (CVE-2026-15920). Risk of unauthorized operations or information disclosure. Exploitable via ``URLField``.
CVE-2026-10032 Cross-Site Scripting (XSS) in CVE-2026-10032 (CVE-2026-10032)
cross-site scripting in CVE-2026-10032 (CVE-2026-10032). Risk of unauthorized operations or information disclosure.
CVE-2026-67196 Cross-Site Scripting (XSS) in CVE-2026-67196 (CVE-2026-67196)
cross-site scripting in CVE-2026-67196 (CVE-2026-67196). Risk of unauthorized operations or information disclosure.
CVE-2026-14337 Cross-Site Scripting (XSS) in CVE-2026-14337 (CVE-2026-14337)
cross-site scripting in CVE-2026-14337 (CVE-2026-14337). Risk of unauthorized operations or information disclosure.
CVE-2026-14192 Cross-Site Scripting (XSS) in CVE-2026-14192 (CVE-2026-14192)
cross-site scripting in CVE-2026-14192 (CVE-2026-14192). Risk of unauthorized operations or information disclosure.
CVE-2026-16548 Unrestricted File Upload in wordpress (CVE-2026-16548)
vulnerability in wordpress (CVE-2026-16548). Risk of unauthorized operations or information disclosure.
CVE-2026-16293 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16293)
cross-site scripting in wordpress (CVE-2026-16293). Successful exploitation can lead to full system takeover.
CVE-2026-67617 Cross-Site Scripting (XSS) in csrf (CVE-2026-67617)
cross-site scripting in csrf (CVE-2026-67617). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/save_content_admin`.
CVE-2026-18682 Cross-Site Scripting (XSS) in CVE-2026-18682 (CVE-2026-18682)
cross-site scripting in CVE-2026-18682 (CVE-2026-18682). Risk of unauthorized operations or information disclosure.
CVE-2026-52520 Cross-Site Scripting (XSS) in CVE-2026-52520 (CVE-2026-52520)
cross-site scripting in CVE-2026-52520 (CVE-2026-52520). Risk of unauthorized operations or information disclosure.
CVE-2026-49131 Cross-Site Scripting (XSS) in CVE-2026-49131 (CVE-2026-49131)
cross-site scripting in CVE-2026-49131 (CVE-2026-49131). Risk of unauthorized operations or information disclosure.
CVE-2026-49132 Cross-Site Scripting (XSS) in CVE-2026-49132 (CVE-2026-49132)
cross-site scripting in CVE-2026-49132 (CVE-2026-49132). Risk of unauthorized operations or information disclosure.
CVE-2026-66296 Cross-Site Scripting (XSS) in lud (CVE-2026-66296)
cross-site scripting in lud (CVE-2026-66296). Risk of unauthorized operations or information disclosure.
CVE-2026-38444 Cross-Site Scripting (XSS) in CVE-2026-38444 (CVE-2026-38444)
cross-site scripting in CVE-2026-38444 (CVE-2026-38444). Risk of unauthorized operations or information disclosure.
CVE-2026-38446 Cross-Site Scripting (XSS) in CVE-2026-38446 (CVE-2026-38446)
cross-site scripting in CVE-2026-38446 (CVE-2026-38446). Risk of unauthorized operations or information disclosure.
CVE-2026-67612 Cross-Site Scripting (XSS) in CVE-2026-67612 (CVE-2026-67612)
cross-site scripting in CVE-2026-67612 (CVE-2026-67612). Risk of unauthorized operations or information disclosure.
CVE-2026-18243 Cross-Site Scripting (XSS) in CVE-2026-18243 (CVE-2026-18243)
cross-site scripting in CVE-2026-18243 (CVE-2026-18243). Risk of unauthorized operations or information disclosure.
CVE-2026-69149 Cross-Site Scripting (XSS) in @angular/platform-server (CVE-2026-69149)
cross-site scripting in @angular/platform-server (CVE-2026-69149). Risk of unauthorized operations or information disclosure. Exploitable via ``domino``.
CVE-2026-69092 Cross-Site Scripting (XSS) in CVE-2026-69092 (CVE-2026-69092)
cross-site scripting in CVE-2026-69092 (CVE-2026-69092). Risk of unauthorized operations or information disclosure.
CVE-2026-69075 Cross-Site Scripting (XSS) in vue (CVE-2026-69075)
cross-site scripting in vue (CVE-2026-69075). Risk of unauthorized operations or information disclosure.
CVE-2026-57279 Cross-Site Scripting (XSS) in jvn (CVE-2026-57279)
cross-site scripting in jvn (CVE-2026-57279). Data can be tampered with by attackers.
CVE-2026-68583 Cross-Site Scripting (XSS) in CVE-2026-68583 (CVE-2026-68583)
cross-site scripting in CVE-2026-68583 (CVE-2026-68583). Risk of unauthorized operations or information disclosure.
CVE-2026-12231 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12231)
cross-site scripting in wordpress (CVE-2026-12231). Risk of unauthorized operations or information disclosure.
CVE-2026-14864 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14864)
cross-site scripting in wordpress (CVE-2026-14864). Risk of unauthorized operations or information disclosure.
CVE-2025-15675 Cross-Site Scripting (XSS) in wordpress (CVE-2025-15675)
cross-site scripting in wordpress (CVE-2025-15675). Risk of unauthorized operations or information disclosure.
CVE-2026-67352 Cross-Site Scripting (XSS) in CVE-2026-67352 (CVE-2026-67352)
cross-site scripting in CVE-2026-67352 (CVE-2026-67352). Confidential information can be exposed externally.
CVE-2026-67338 Vulnerability in CVE-2026-67338 (CVE-2026-67338)
vulnerability in CVE-2026-67338 (CVE-2026-67338). Risk of unauthorized operations or information disclosure.
CVE-2026-67328 Cross-Site Scripting (XSS) in CVE-2026-67328 (CVE-2026-67328)
cross-site scripting in CVE-2026-67328 (CVE-2026-67328). Confidential information can be exposed externally.
CVE-2025-71404 Cross-Site Scripting (XSS) in CVE-2025-71404 (CVE-2025-71404)
cross-site scripting in CVE-2025-71404 (CVE-2025-71404). Risk of unauthorized operations or information disclosure.
CVE-2026-18435 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18435)
cross-site scripting in wordpress (CVE-2026-18435). Risk of unauthorized operations or information disclosure.
CVE-2026-18344 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18344)
cross-site scripting in wordpress (CVE-2026-18344). Risk of unauthorized operations or information disclosure.
CVE-2026-18062 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18062)
cross-site scripting in wordpress (CVE-2026-18062). Risk of unauthorized operations or information disclosure.
CVE-2026-17571 Cross-Site Scripting (XSS) in wordpress (CVE-2026-17571)
cross-site scripting in wordpress (CVE-2026-17571). Risk of unauthorized operations or information disclosure.
CVE-2026-16685 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16685)
cross-site scripting in wordpress (CVE-2026-16685). Risk of unauthorized operations or information disclosure.
CVE-2026-16684 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16684)
cross-site scripting in wordpress (CVE-2026-16684). Risk of unauthorized operations or information disclosure.
CVE-2026-16091 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16091)
cross-site scripting in wordpress (CVE-2026-16091). Risk of unauthorized operations or information disclosure.
CVE-2026-16090 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16090)
cross-site scripting in wordpress (CVE-2026-16090). Risk of unauthorized operations or information disclosure.
CVE-2026-15662 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15662)
cross-site scripting in wordpress (CVE-2026-15662). Risk of unauthorized operations or information disclosure.
CVE-2026-15644 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15644)
cross-site scripting in wordpress (CVE-2026-15644). Risk of unauthorized operations or information disclosure.
CVE-2026-15649 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15649)
cross-site scripting in wordpress (CVE-2026-15649). Risk of unauthorized operations or information disclosure.
CVE-2026-15645 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15645)
cross-site scripting in wordpress (CVE-2026-15645). Risk of unauthorized operations or information disclosure.
CVE-2026-15950 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15950)
cross-site scripting in wordpress (CVE-2026-15950). Risk of unauthorized operations or information disclosure.
CVE-2026-13458 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13458)
cross-site scripting in wordpress (CVE-2026-13458). Risk of unauthorized operations or information disclosure.
CVE-2026-15052 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15052)
cross-site scripting in wordpress (CVE-2026-15052). Risk of unauthorized operations or information disclosure.
CVE-2026-13725 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13725)
cross-site scripting in wordpress (CVE-2026-13725). Risk of unauthorized operations or information disclosure.
CVE-2026-7623 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7623)
cross-site scripting in wordpress (CVE-2026-7623). Risk of unauthorized operations or information disclosure.
CVE-2026-13362 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13362)
cross-site scripting in wordpress (CVE-2026-13362). Risk of unauthorized operations or information disclosure.
CVE-2026-52232 Cross-Site Scripting (XSS) in CVE-2026-52232 (CVE-2026-52232)
cross-site scripting in CVE-2026-52232 (CVE-2026-52232). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →