Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 0.3.6.Oct 13, 2026
- Medium6.4The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.7.29 due to insuff…Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submittin…Oct 13, 2026
- Medium5.3Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-contro…Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to persist unneutralized markup by subm…Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting a…Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML attribute…Oct 13, 2026
- Medium5.4Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue wher…Oct 13, 2026
- Critical9.3Contao: Cross-site scripting in the comments bundleEPSS 0.3%Oct 9, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationSep 29, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityKEVEPSS 0.5%May 14, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityKEVEPSS 20.2%Jan 5, 2026
- Medium6.1RoundCube Webmail Cross-site Scripting VulnerabilityKEVEPSS 26.8%Dec 17, 2025
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityKEVEPSS 1.7%Jun 23, 2025
- Medium5.4Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityKEVEPSS 4.1%Mar 12, 2025
- Medium6.3Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 22.6%Nov 19, 2024
- Medium5.3MDaemon Email Server Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 31.4%Nov 15, 2024
- High8.1Microsoft Windows MSHTML Platform Spoofing VulnerabilityKEVEPSS 46.1%Oct 8, 2024
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 23.6%Aug 12, 2024
- Critical9.3RoundCube Webmail Cross-Site Scripting VulnerabilityKEVEPSS 82.9%Aug 5, 2024
- Medium6.1RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 73.3%Jun 6, 2024
- Medium5.4Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 75.9%Oct 18, 2023
- Medium6.1Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 63.7%Sep 21, 2023
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 49.1%Jul 27, 2023
- Critical9.0Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 77.3%Jul 6, 2023
54 records · page 1 of 3
PreviousNext