Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: xss Clear
ID Title
CVE-2026-11491 Cross-Site Scripting (XSS) in CVE-2026-11491 (CVE-2026-11491)
cross-site scripting in CVE-2026-11491 (CVE-2026-11491). Risk of unauthorized operations or information disclosure.
CVE-2021-47982 Cross-Site Scripting (XSS) in wordpress (CVE-2021-47982)
cross-site scripting in wordpress (CVE-2021-47982). Risk of unauthorized operations or information disclosure.
CVE-2023-54351 Cross-Site Scripting (XSS) in wordpress (CVE-2023-54351)
cross-site scripting in wordpress (CVE-2023-54351). Risk of unauthorized operations or information disclosure.
CVE-2021-47983 Cross-Site Scripting (XSS) in c (CVE-2021-47983)
cross-site scripting in c (CVE-2021-47983). Risk of unauthorized operations or information disclosure.
CVE-2021-47984 Cross-Site Scripting (XSS) in wordpress (CVE-2021-47984)
cross-site scripting in wordpress (CVE-2021-47984). Risk of unauthorized operations or information disclosure.
CVE-2026-11468 Cross-Site Scripting (XSS) in CVE-2026-11468 (CVE-2026-11468)
cross-site scripting in CVE-2026-11468 (CVE-2026-11468). Risk of unauthorized operations or information disclosure.
CVE-2026-11436 Cross-Site Scripting (XSS) in CVE-2026-11436 (CVE-2026-11436)
cross-site scripting in CVE-2026-11436 (CVE-2026-11436). Risk of unauthorized operations or information disclosure.
CVE-2026-11434 Cross-Site Scripting (XSS) in CVE-2026-11434 (CVE-2026-11434)
cross-site scripting in CVE-2026-11434 (CVE-2026-11434). Risk of unauthorized operations or information disclosure.
CVE-2026-9594 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9594)
cross-site scripting in wordpress (CVE-2026-9594). Risk of unauthorized operations or information disclosure.
CVE-2026-7796 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7796)
cross-site scripting in wordpress (CVE-2026-7796). Risk of unauthorized operations or information disclosure.
CVE-2026-8991 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8991)
cross-site scripting in wordpress (CVE-2026-8991). Risk of unauthorized operations or information disclosure.
CVE-2026-9280 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9280)
cross-site scripting in wordpress (CVE-2026-9280). Risk of unauthorized operations or information disclosure.
CVE-2026-7795 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7795)
cross-site scripting in wordpress (CVE-2026-7795). Risk of unauthorized operations or information disclosure.
CVE-2026-8901 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8901)
cross-site scripting in wordpress (CVE-2026-8901). Risk of unauthorized operations or information disclosure.
CVE-2026-9281 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9281)
cross-site scripting in wordpress (CVE-2026-9281). Risk of unauthorized operations or information disclosure.
CVE-2026-8438 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8438)
cross-site scripting in wordpress (CVE-2026-8438). Risk of unauthorized operations or information disclosure.
CVE-2026-8900 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8900)
cross-site scripting in wordpress (CVE-2026-8900). Risk of unauthorized operations or information disclosure.
CVE-2026-8893 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8893)
cross-site scripting in wordpress (CVE-2026-8893). Risk of unauthorized operations or information disclosure.
CVE-2026-47743 Cross-Site Scripting (XSS) in shopper/framework (CVE-2026-47743)
cross-site scripting in shopper/framework (CVE-2026-47743). Confidential information can be exposed externally. Exploitable via ``Hidden``. Mitigation: upgrade to `2.8.0` or later.
CVE-2026-25624 Cross-Site Scripting (XSS) in arista (CVE-2026-25624)
cross-site scripting in arista (CVE-2026-25624). Confidential information can be exposed externally.
CVE-2026-11338 Cross-Site Scripting (XSS) in CVE-2026-11338 (CVE-2026-11338)
cross-site scripting in CVE-2026-11338 (CVE-2026-11338). Risk of unauthorized operations or information disclosure.
CVE-2026-11337 Cross-Site Scripting (XSS) in CVE-2026-11337 (CVE-2026-11337)
cross-site scripting in CVE-2026-11337 (CVE-2026-11337). Risk of unauthorized operations or information disclosure.
CVE-2026-38579 Cross-Site Scripting (XSS) in CVE-2026-38579 (CVE-2026-38579)
cross-site scripting in CVE-2026-38579 (CVE-2026-38579). Risk of unauthorized operations or information disclosure.
CVE-2026-50232 Cross-Site Scripting (XSS) in CVE-2026-50232 (CVE-2026-50232)
cross-site scripting in CVE-2026-50232 (CVE-2026-50232). Risk of unauthorized operations or information disclosure.
CVE-2026-50231 Cross-Site Scripting (XSS) in CVE-2026-50231 (CVE-2026-50231)
cross-site scripting in CVE-2026-50231 (CVE-2026-50231). Risk of unauthorized operations or information disclosure. Exploitable via `User-Agent header`.
CVE-2026-50230 Cross-Site Scripting (XSS) in CVE-2026-50230 (CVE-2026-50230)
cross-site scripting in CVE-2026-50230 (CVE-2026-50230). Risk of unauthorized operations or information disclosure.
CVE-2026-50235 Cross-Site Scripting (XSS) in CVE-2026-50235 (CVE-2026-50235)
cross-site scripting in CVE-2026-50235 (CVE-2026-50235). Risk of unauthorized operations or information disclosure.
CVE-2026-21825 Cross-Site Scripting (XSS) in hcltech (CVE-2026-21825)
cross-site scripting in hcltech (CVE-2026-21825). Risk of unauthorized operations or information disclosure.
CVE-2026-50591 IN Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.
IN Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.
CVE-2026-50592 Cross-Site Scripting (XSS) in CVE-2026-50592 (CVE-2026-50592)
cross-site scripting in CVE-2026-50592 (CVE-2026-50592). Risk of unauthorized operations or information disclosure.
CVE-2026-11326 Vulnerability in CVE-2026-11326 (CVE-2026-11326)
vulnerability in CVE-2026-11326 (CVE-2026-11326). Risk of unauthorized operations or information disclosure.
CVE-2026-42547 Authorization Flaw in CVE-2026-42547 (CVE-2026-42547)
vulnerability in CVE-2026-42547 (CVE-2026-42547). Risk of unauthorized operations or information disclosure.
CVE-2026-42538 Unrestricted File Upload in CVE-2026-42538 (CVE-2026-42538)
vulnerability in CVE-2026-42538 (CVE-2026-42538). Confidential information can be exposed externally.
CVE-2025-65640 Cross-Site Scripting (XSS) in CVE-2025-65640 (CVE-2025-65640)
cross-site scripting in CVE-2025-65640 (CVE-2025-65640). Confidential information can be exposed externally.
CVE-2026-54458 Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-54458)
cross-site scripting in WWBN/AVideo (CVE-2026-54458). Confidential information can be exposed externally. Exploitable via ``page_title``.
CVE-2026-50183 Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-50183)
cross-site scripting in WWBN/AVideo (CVE-2026-50183). Risk of unauthorized operations or information disclosure. Exploitable via ``snippet.title``.
CVE-2026-50182 Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-50182)
cross-site scripting in WWBN/AVideo (CVE-2026-50182). Risk of unauthorized operations or information disclosure. Exploitable via ``href``.
CVE-2026-49279 Cross-Site Scripting (XSS) in wwbn/avideo (CVE-2026-49279)
cross-site scripting in wwbn/avideo (CVE-2026-49279). Risk of unauthorized operations or information disclosure. Exploitable via ``autoEvalCodeOnHTML``.
CVE-2025-67448 Cross-Site Scripting (XSS) in CVE-2025-67448 (CVE-2025-67448)
cross-site scripting in CVE-2025-67448 (CVE-2025-67448). Confidential information can be exposed externally.
CVE-2026-43984 Cross-Site Scripting (XSS) in CVE-2026-43984 (CVE-2026-43984)
cross-site scripting in CVE-2026-43984 (CVE-2026-43984). Confidential information can be exposed externally. Exploitable via ``log_js_errors``.
CVE-2026-10810 Cross-Site Scripting (XSS) in CVE-2026-10810 (CVE-2026-10810)
cross-site scripting in CVE-2026-10810 (CVE-2026-10810). Risk of unauthorized operations or information disclosure.
CVE-2019-25742 Cross-Site Scripting (XSS) in wordpress (CVE-2019-25742)
cross-site scripting in wordpress (CVE-2019-25742). Risk of unauthorized operations or information disclosure.
CVE-2019-25737 Cross-Site Scripting (XSS) in CVE-2019-25737 (CVE-2019-25737)
cross-site scripting in CVE-2019-25737 (CVE-2019-25737). Risk of unauthorized operations or information disclosure.
CVE-2019-25744 Cross-Site Scripting (XSS) in wordpress (CVE-2019-25744)
cross-site scripting in wordpress (CVE-2019-25744). Risk of unauthorized operations or information disclosure.
CVE-2019-25739 Cross-Site Scripting (XSS) in CVE-2019-25739 (CVE-2019-25739)
cross-site scripting in CVE-2019-25739 (CVE-2019-25739). Risk of unauthorized operations or information disclosure.
CVE-2019-25743 Cross-Site Scripting (XSS) in wordpress (CVE-2019-25743)
cross-site scripting in wordpress (CVE-2019-25743). Risk of unauthorized operations or information disclosure.
CVE-2019-25731 Cross-Site Scripting (XSS) in CVE-2019-25731 (CVE-2019-25731)
cross-site scripting in CVE-2019-25731 (CVE-2019-25731). Risk of unauthorized operations or information disclosure.
CVE-2025-52612 Vulnerability in hcltech (CVE-2025-52612)
vulnerability in hcltech (CVE-2025-52612). Successful exploitation can lead to full system takeover.
CVE-2025-52609 Vulnerability in hcltech (CVE-2025-52609)
vulnerability in hcltech (CVE-2025-52609). Risk of unauthorized operations or information disclosure.
CVE-2026-37700 Cross-Site Scripting (XSS) in CVE-2026-37700 (CVE-2026-37700)
cross-site scripting in CVE-2026-37700 (CVE-2026-37700). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →