VulnSea

CWE-79

CVEs classified under CWE-79, newest first.

2141 CVEsRSS

CVE-2026-7462Medium· 6.1
4mo ago

The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `page` parameter in all versions up to, and including, 1.01

The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `page` parameter in all versions up to, and including, 1.01. This is due to insufficient input sanitization and output escaping. This makes …

▾ SunlitEPSS 0.37%via NVD
CVE-2026-5090Medium· 6.1
4mo ago

Template::Plugin::HTML versions before 3.103 for Perl allows HTML and JavaScript to be injected. The html_filter function did not escape single quotes

Template::Plugin::HTML versions before 3.103 for Perl allows HTML and JavaScript to be injected. The html_filter function did not escape single quotes. HTML attributes inside of single quotes could be have code injected. For example, t…

▾ SunlitEPSS 0.34%via NVD
CVE-2026-34658Medium· 4.8
4mo ago

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious…

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious…

▾ Sunlitadobe · commerceEPSS 0.41%via NVD
CVE-2026-34655Medium· 4.8
4mo ago

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious…

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious…

▾ Sunlitadobe · commerceEPSS 0.41%via NVD
CVE-2026-25789High· 7.1
4mo ago

Affected devices do not properly validate and sanitize filenames on the Firmware Update page

Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social engineer the user into selecting the modified firmware file to be uploaded. This would result in …

▾ TwilightEPSS 0.47%via NVD
CVE-2026-25787Critical· 9.1
4mo ago

Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface

Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA pro…

▾ MidnightEPSS 0.54%via NVD
CVE-2026-25786Critical· 9.1
4mo ago

Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into th…

Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into th…

▾ MidnightEPSS 0.54%via NVD
CVE-2026-42338Medium· 6.1PoC⚖ disputed
4mo ago

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they…

▾ Twilightbeaugunderson · ip-addressEPSS 0.51%via NVD
CVE-2026-7308Medium· 5.4
4mo ago

An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via the HTML index page in Sonatype Nexus …

An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via the HTML index page in Sonatype Nexus …

▾ Sunlitsonatype · nexus_repository_managerEPSS 0.40%via NVD
CVE-2026-8256Low· 2.4
4mo ago

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown code of the file /accounts/mr-save. Such manipulation leads to cross site scripting. The attack can be launched remotely…

▾ SunlitEPSS 0.35%via NVD
CVE-2026-8255Low· 2.4
4mo ago

A weakness has been identified in Devs Palace ERP Online up to 4.0.0

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventory/add_new_customer. This manipulation causes cross site scripting. The attack can be initiated remotely. The exploit …

▾ SunlitEPSS 0.35%via NVD
CVE-2026-8254Low· 2.4
4mo ago

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/sales_save. The manipulation results in cross site scripting. It is possible to launch…

▾ SunlitEPSS 0.35%via NVD
CVE-2026-8253Low· 2.4
4mo ago

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase_save. The manipulation leads to cross site scripting. It is possible to init…

▾ SunlitEPSS 0.35%via NVD
CVE-2026-8262Low· 2.4
4mo ago

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /accounts/chart-save. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploi…

▾ SunlitEPSS 0.35%via NVD
CVE-2022-50945Medium· 6.4
4mo ago

WordPress 3dady Real-Time Web Stats plugin 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by exploiting unsanitized input fields

WordPress 3dady Real-Time Web Stats plugin 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by exploiting unsanitized input fields. Attackers can insert JavaScrip…

▾ SunlitEPSS 0.22%via NVD
CVE-2026-8221Low· 2.4
4mo ago

A flaw has been found in Devs Palace ERP Online up to 4.0.0

A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/item-save. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit…

▾ SunlitEPSS 0.35%via NVD
CVE-2026-8220Low· 2.4
4mo ago

A vulnerability was detected in Devs Palace ERP Online up to 4.0.0

A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit…

▾ SunlitEPSS 0.35%via NVD
CVE-2026-41591Medium· 6.4
4mo ago

Marko is a declarative, HTML-based language for building web apps

Marko is a declarative, HTML-based language for building web apps. Prior to marko version 5.38.36 and prior to @marko/runtime-tags 6.0.164, when dynamic text is interpolated into a <script> or <style> tag the Marko runtime failed to prev…

▾ Sunlitopenjsf · markoEPSS 0.27%via NVD
CVE-2026-39823Medium· 5.4
4mo ago

html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)

A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper esc…

▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.33%via CSAF
CVE-2026-8080Medium· 5.4PoC
4mo ago

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in misp allows Stored XSS. This issue affects MISP before 2.5.37. A stored cross-site scripting vulnerability exists in t…

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in misp allows Stored XSS. This issue affects MISP before 2.5.37. A stored cross-site scripting vulnerability exists in t…

▾ TwilightEPSS 0.24%via NVD
CVE-2026-23928Medium· 6.8
4mo ago

The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled

The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a da…

▾ Sunlitzabbix · zabbixEPSS 0.26%via NVD
CVE-2026-23926Medium· 6.8
4mo ago

An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget

An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to…

▾ Sunlitzabbix · zabbixEPSS 0.26%via NVD
CVE-2026-42052None
4mo ago

Beets is the media library management system

Beets is the media library management system. Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode <%= ... %> for untrusted metadata fields. In this runtime, <%= ... %> is raw insertion and HTML escapin…

▾ SunlitEPSS 0.53%via NVD
CVE-2026-40171High· 8.8
5mo ago

Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

▾ Twilightjupyter-notebook · @jupyter-notebook/help-extensionEPSS 0.66%via OSV
CVE-2026-5428Medium· 6.4
5mo ago

The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image captions in the Image Grid/Slider/Carousel widget in versions up to and including 1.7.1056

The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image captions in the Image Grid/Slider/Carousel widget in versions up to and including 1.7.1056. This is due to insufficient output escapin…

▾ SunlitEPSS 0.35%via NVD
CVE-2026-3885Medium· 6.4
5mo ago

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_box' shortcode in all versions up to, and including, 7.4.9 due to insufficient input sanitization and o…

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_box' shortcode in all versions up to, and including, 7.4.9 due to insufficient input sanitization and o…

▾ SunlitEPSS 0.32%via NVD
CVE-2026-20132Medium· 4.8
5mo ago

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative&nbsp;write privileges to conduct a stored cross-site scripting (XSS)…

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative&nbsp;write privileges to conduct a stored cross-site scripting (XSS)…

▾ Sunlitcisco · identity_services_engineEPSS 0.17%via NVD
CVE-2026-20945Medium· 4.6
5mo ago

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

▾ SunlitMicrosoft · Microsoft SharePoint Enterprise Server 2016EPSS 19%via CVEORG
CVE-2026-32196Medium· 6.1
5mo ago

Windows Admin Center Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

▾ SunlitMicrosoft · Windows Admin CenterEPSS 0.41%via CVEORG
CVE-2026-27258Medium· 5.4
5mo ago

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in …

▾ Sunlitadobe · dng_software_development_kitEPSS 0.63%via NVD
CWE-79 vulnerabilities (CVEs) — page 52 · VulnSea