Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web.Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submittin…Oct 13, 2026
- Medium5.3Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-contro…Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to persist unneutralized markup by subm…Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting a…Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML attribute…Oct 13, 2026
- Medium5.4Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue wher…Oct 13, 2026
- Medium5.3Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability in a public portal form that accepts unauthenticated submis…Oct 12, 2026
- Medium5.1Frappe ERPNext 16.x before 16.27.0 contains a stored cross-site scripting vulnerability that allows users with edit rights to inject script through a record name rende…Oct 12, 2026
- Low1.9A security vulnerability has been detected in Edimax BR-6208AC 1.32.Oct 12, 2026
- High8.6Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to missing input validation on a certain page, allowi…Oct 12, 2026
- Low2.1A vulnerability was determined in Netcore NR268 1.7.121109.Oct 12, 2026
- Medium6.4The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ttp_filter_taxonomy (meta of the attacker-chosen pos…Oct 10, 2026
- Critical9.3Contao: Cross-site scripting in the comments bundleEPSS 0.3%Oct 9, 2026
- Medium5.3Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page.Oct 6, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Fernandez Adsmonetizer adsensei-b30 allows Reflected XSS.Thi…Oct 5, 2026
- Medium6.4The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3…Oct 3, 2026
- Medium6.4The Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to…Sep 30, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationSep 29, 2026
- Medium6.4The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cjtoolbox shortcode in all versions up to, and includin…Sep 25, 2026
- Medium5.1UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfig…Sep 21, 2026
- Low3.5The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per…Sep 19, 2026
- High8.6Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages.Sep 18, 2026
- High8.1A flaw was found in FreeIPA.Sep 9, 2026
- Critical9.3Trilium is an open-source hierarchical note-taking application.Aug 27, 2026