CWE-116.

Reflected XSS in authenticated agent context

• OTRS
• OTRS AG ((OTRS)) Community Edition
• Cross-site scripting (XSS)
• CWE-116

pam_usb: Command injection via $TMUX environment variable leads to RCE as root

• mcdope pam_usb
• Command injection
• CWE-116

CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters

• Cross-site scripting (XSS)
• CWE-116

<2.2.7 || >=3.0.0.beta, <3.1.3 · fixed in 2.2.7, 3.1.3

CryptPad has a Sanitizer Bypass in Diffmarked.js that Allows Arbitrary HTML Injection and Potential XSS

• Cross-site scripting (XSS)
• CWE-116

<=5.9.0 · no fixed version yet

NousResearch hermes-agent Slack Agent/Mattermost Agent escape output

• NousResearch hermes-agent
• Other injection
• CWE-116

Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`

• CWE-116

<3.26.0 · fixed in 3.26.0

Twig: The `spaceless` filter implicitly marks its output as safe

• CWE-116

<3.26.0 · fixed in 3.26.0

CtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML Output

• panel
• Cross-site scripting (XSS)
• CWE-116

go-git: Improper single-quote escaping in go-git SSH transport

• CWE-116

<=4.7.0 · no fixed version yet

HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft

• Cross-site scripting (XSS)
• CWE-116

<26.0.0 · fixed in 26.0.0

Apostrophe has stored XSS via javascript: URL in Image Widget Link

• Cross-site scripting (XSS)
• CWE-116

=4.29.0 · no fixed version yet

SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution

• Cross-site scripting (XSS)
• CWE-116

<=0.0.0-20260421031503-96dfe0bea474 · no fixed version yet

Improper output encoding in Apple Safari and others

• Apple Safari
• Apple iOS and iPadOS
• CWE-20
• CWE-116

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

• CWE-116

>=2.6.0, <=2.9.0 · no fixed version yet

Hono has CSS Declaration Injection via Style Object Values in JSX SSR

• Other injection
• CWE-116

<4.12.18 · fixed in 4.12.18

SiYuan: Electron Renderer RCE via decodeURIComponent-driven tooltip XSS in aria-label sink (incomplete fix for CVE-2026-34585)

• Cross-site scripting (XSS)
• CWE-116

<=0.0.0-20260421031503-96dfe0bea474 · no fixed version yet

MCP Registry vulnerable to stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`

• Cross-site scripting (XSS)
• CWE-116

<1.7.7 · fixed in 1.7.7

Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers

• Cross-site scripting (XSS)
• CWE-116

<1.4.8-0.20260503035519-fd320fe3e902 · fixed in 1.4.8-0.20260503035519-fd320fe3e902

phpMyFAQ has stored XSS via Utils::parseUrl() in comment rendering

• Cross-site scripting (XSS)
• CWE-116

>=4.1.1, <4.1.2 · fixed in 4.1.2

YAFNET has Stored XSS in Forum Thread Posts/Replies that Allows Arbitrary JavaScript Execution for All Thread Viewers

• Cross-site scripting (XSS)
• CWE-116

<3.2.12 || >=4.0.0-beta01, <4.0.5 · fixed in 3.2.12, 4.0.5

YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header

• Cross-site scripting (XSS)
• CWE-116

<3.2.12 || >=4.0.0-beta01, <4.0.5 · fixed in 3.2.12, 4.0.5

Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams

• CWE-116
• CWE-626

<0.31.1 || >=1.0.0, <1.15.1 · fixed in 0.31.1, 1.15.1

Apache Polaris has an Improper Input Validation Issue

• CWE-20
• CWE-116

<1.4.1 · fixed in 1.4.1

AnythingLLM vulnerable to stored DOM XSS in chart caption renderer - LLM-driven prompt injection produces executable HTML via unsanitized renderMarkdown(content.caption) in Chartable component

• Mintplex-Labs anything-llm
• Cross-site scripting (XSS)
• Code injection

PRSD detection denial of service

• PowerDNS DNSdist
• CWE-116

mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API

• mailcow-dockerized
• SQL injection
• CWE-20

FreeScout Vulnerable to XSS via Mailbox Signature Due to Incomplete HTML Sanitization

• freescout
• Cross-site scripting (XSS)
• CWE-116

FreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature Variables

• freescout
• CWE-116

Improper output encoding in Zyxel WRE6505 v2 firmware

• Zyxel WRE6505 v2 firmware
• CWE-116

pretalx mail templates vulnerable to email injection via unescaped user-controlled placeholders

• Cross-site scripting (XSS)
• CWE-116

<2026.1.0 · fixed in 2026.1.0

ChurchCRM: Stored XSS in UserEditor.php via Login Name Field

• CRM
• Cross-site scripting (XSS)
• CWE-116

ChurchCRM: Stored XSS in PledgeEditor.php via Donation Comment Field

• CRM
• Cross-site scripting (XSS)
• CWE-116

Stirling-PDF: Reflected XSS through crafted filename in file upload functionality

• Stirling-Tools Stirling-PDF
• Cross-site scripting (XSS)
• CWE-20

zrok: Reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering

• Cross-site scripting (XSS)
• CWE-116

<=1.1.11 · no fixed version yet

Stored XSS in SEO Fields Leads to Authenticated API Data Exposure in ApostropheCMS

• Cross-site scripting (XSS)
• CWE-116

<4.29.0 · fixed in 4.29.0

Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability

• Cisco Identity Services Engine Software
• CWE-116

Improper output encoding in Schneider Electric PowerChute™ Serial Shutdown

• Schneider Electric PowerChute™ Serial Shutdown
• CWE-116

EspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post field

• espocrm
• Cross-site scripting (XSS)
• CWE-116

Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix

• Command injection
• CWE-116

<8.43.0 · fixed in 8.43.0

Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

• CWE-116

>=2.14.0, <2.25.4 || >=3.0.0-alpha1, <=3.0.0-beta3 · fixed in 2.25.4

Apache Log4j 1 to Log4j 2 bridge: silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters

• CWE-116

>=2.7, <2.25.4 || >=3.0.0-beta1, <=3.0.0-beta2 · fixed in 2.25.4

Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

• CWE-116

<3.3.0 · fixed in 3.3.0

Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters

• CWE-116

>=2.0-alpha1, <2.25.4 || >=3.0.0-alpha1, <=3.0.0-beta3 · fixed in 2.25.4

Apache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden characters

• Apache Software Foundation Apache Log4cxx
• Apache Software Foundation Apache Log4cxx (Conan)
• CWE-116

Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve

• CWE-116

>=9.0.40, <9.0.116 || >=10.1.0-M1, <10.1.54 || >=11.0.0-M1, <11.0.21 · fixed in 9.0.116, 10.1.54, 11.0.21

ChurchCRM has Stored XSS in PersonView.php via Facebook Field Attribute Injection

• CRM
• Cross-site scripting (XSS)
• CWE-116

lichess.org has an Unsanitized Stream Title Injection on /streamer

• lichess-org lila
• Cross-site scripting (XSS)
• CWE-116

GLPI has an Unauthenticated Stored XSS via inventory

• glpi
• Cross-site scripting (XSS)
• Authentication bypass

GLPI has Stored XSS in Supplier 'Website' field

• glpi
• Cross-site scripting (XSS)
• CWE-116

OpenClaw has ACP CLI approval prompt ANSI escape sequence injection

• CWE-116
• CWE-150

>=2026.2.13, <2026.3.28 · fixed in 2026.3.28

AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction

• CWE-20
• CWE-116

<3.7.510.7 · fixed in 3.7.510.7

AWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities

• CWE-20
• CWE-116

>=2.18.33, <2.41.30 · fixed in 2.41.30

Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options

• Cross-site scripting (XSS)
• Code injection

>=4.0.0, <4.7.9 · fixed in 4.7.9

Loofah has improper detection of disallowed URIs via `allowed_uri?`

• Cross-site scripting (XSS)
• CWE-116

>=2.25.0, <2.25.1 · fixed in 2.25.1

OpenBao has Reflected XSS in its OIDC authentication error message

• Cross-site scripting (XSS)
• CWE-20

<0.0.0-20260325133417-6e2b2dd84f0e · fixed in 0.0.0-20260325133417-6e2b2dd84f0e

Invoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line Items

• Cross-site scripting (XSS)
• CWE-116

<5.13.4 · fixed in 5.13.4

Textpattern CMS 4.9.0: Second-Order XSS via Atom Feed Injection

• Textpattern CMS
• Cross-site scripting (XSS)
• CWE-116

SuiteCRM has blind XSS in return_id parameter

• SuiteCRM
• Cross-site scripting (XSS)
• CWE-116

FreeScout: Stored XSS via Unescaped Email Template Rendering ({!! $thread->body !!})

• freescout
• Cross-site scripting (XSS)
• CWE-116

OpenEMR has arbitrary image file read via PDF generator

• openemr
• CWE-116