Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter.Apr 15, 2026
- Medium5.4An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0…Apr 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pinpoll Pinpoll pinpoll allows Reflected XSS.This issue affects P…Jan 8, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliat…Jan 6, 2026
- Medium6.1vega-functions provides function implementations for the Vega expression language.Jan 5, 2026
- Critical9.3Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.Jan 5, 2026
- Medium4.8Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS) if caption content is derived from user input.Jan 5, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityKEVEPSS 20.2%Jan 5, 2026
- Low2.2A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie.Jan 2, 2026
- Medium6.1RoundCube Webmail Cross-site Scripting VulnerabilityKEVEPSS 26.8%Dec 17, 2025
- Medium5.4grav before v1.7.49.5 has a Stored Cross-Site Scripting (Stored XSS) vulnerability in the page editing functionality.Dec 15, 2025
- High8.1An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
- Critical9.0In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.Dec 15, 2025
- Low2.0A security vulnerability has been detected in Qualitor up to 8.24.73.Dec 12, 2025
- Medium4.6RuoYi versions 4.8.1 and earlier is affected by a stored XSS vulnerability in the /system/menu/edit endpoint.Dec 12, 2025
- Medium4.6jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.Dec 12, 2025
- Medium4.6jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability.Dec 12, 2025
- Medium6.1Masa CMS is an open source Enterprise Content Management platform.Dec 12, 2025
- Medium6.1HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.Dec 11, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.Dec 11, 2025
- High8.0GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have, under certa…Dec 11, 2025
- High8.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that, under certain condition…Dec 11, 2025
- Medium6.1Shopware is an open commerce platform.Dec 11, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Dec 10, 2025