# Cross-site scripting (XSS). Untrusted input rendered as script in someone else’s browser. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Penpot: Stored XSS via custom font family name injected into a @font-face style rule](https://agentprime.io/advisories/CVE-2026-47666.md) `CVE-2026-47666` · CVE record: penpot penpot · CVSS 7.6 High · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [LimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpoint](https://agentprime.io/advisories/CVE-2026-63360.md) `CVE-2026-63360` · CVE record: LimeSurvey LimeSurvey · CVSS 7.4 High · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering](https://agentprime.io/advisories/CVE-2026-16809.md) `CVE-2026-16809` · CVE record: LimeSurvey LimeSurvey · CVSS 7.2 High · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields](https://agentprime.io/advisories/CVE-2026-65930.md) `CVE-2026-65930` · CVE record: LimeSurvey LimeSurvey · CVSS 4.8 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [LimeSurvey 7.0.5 - Stored XSS in Survey Menu Entries](https://agentprime.io/advisories/CVE-2026-15973.md) `CVE-2026-15973` · CVE record: LimeSurvey LimeSurvey · CVSS 8.4 High · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [OpenSTAManager has HTML Injection in modules/utenti/edit.php](https://agentprime.io/advisories/GHSA-crx4-7mmq-j74j.md) `GHSA-crx4-7mmq-j74j`, `CVE-2026-44701`, `PKSA-nvw4-h4ry-dgt3` · Packagist `devcode-it/openstamanager`: affected `<2.11-beta`, fixed in `2.11-beta` · CVSS 3.5 Low · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [LibreNMS — Stored XSS via SNMP/Syslog Data in Legacy Templates](https://agentprime.io/advisories/GHSA-7w8c-qgxg-m7jx.md) `GHSA-7w8c-qgxg-m7jx`, `CVE-2026-84192`, `PKSA-pcg8-3qh7-w8k9` · Packagist `librenms/librenms`: affected `<26.5.0`, fixed in `26.5.0` · CVSS 7.1 High · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description](https://agentprime.io/advisories/CVE-2026-80426.md) `CVE-2026-80426` · CVE record: voxel51 fiftyone · CVSS 7.0 High · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed](https://agentprime.io/advisories/GHSA-w93q-cq9w-58p7.md) `GHSA-w93q-cq9w-58p7`, `CVE-2026-54606` · npm `suneditor`: affected `>=3.0.0, <3.1.4`, fixed in `3.1.4` · CVSS 8.5 High · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI](https://agentprime.io/advisories/CVE-2026-5092.md) `CVE-2026-5092` · CVE record: wpsoul Greenshift – animation and page builder blocks · CVSS 6.4 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [Reviews and Rating – Google Reviews <= 5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes](https://agentprime.io/advisories/CVE-2026-2388.md) `CVE-2026-2388` · CVE record: designextreme Reviews and Rating – Google Reviews · CVSS 6.4 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [Betheme <= 28.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' Shortcode](https://agentprime.io/advisories/CVE-2026-6178.md) `CVE-2026-6178` · CVE record: MuffinGroup Betheme · CVSS 6.4 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter](https://agentprime.io/advisories/CVE-2026-18331.md) `CVE-2026-18331` · CVE record: strategy11team Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More · CVSS 7.2 High · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks](https://agentprime.io/advisories/CVE-2026-3002.md) `CVE-2026-3002` · CVE record: jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor · CVSS 6.4 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings](https://agentprime.io/advisories/CVE-2026-19226.md) `CVE-2026-19226` · CVE record: Unknown Royal Addons for Elementor · CVSS 6.8 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header](https://agentprime.io/advisories/CVE-2026-19760.md) `CVE-2026-19760` · CVE record: emrevona WP Fastest Cache – WordPress Cache Plugin · CVSS 7.2 High · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components](https://agentprime.io/advisories/CVE-2026-39275.md) `CVE-2026-39275` · CVE record · CVSS 6.1 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS) - [Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080](https://agentprime.io/advisories/CVE-2026-16638.md) `CVE-2026-16638` · CVE record: Drupal Media Folders · CVSS 6.1 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082](https://agentprime.io/advisories/CVE-2026-16640.md) `CVE-2026-16640` · CVE record: Drupal Search API Autocomplete · CVSS 6.1 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [code-projects Online Shopping System sumit_form.php cross site scripting](https://agentprime.io/advisories/CVE-2026-79793.md) `CVE-2026-79793` · CVE record: code-projects Online Shopping System · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning](https://agentprime.io/advisories/CVE-2026-74932.md) `CVE-2026-74932` · CVE record: Unknown WP Fastest Cache · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field](https://agentprime.io/advisories/CVE-2026-26211.md) `CVE-2026-26211` · CVE record: Creativeitem Ekushey Project Manager CRM · CVSS 4.8 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript](https://agentprime.io/advisories/GHSA-qj6x-xx2h-8hvv.md) `GHSA-qj6x-xx2h-8hvv`, `CVE-2026-55596` · npm `@platejs/media`: affected `>=53.0.0, <53.1.4`, fixed in `53.1.4` · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41](https://agentprime.io/advisories/CVE-2026-77996.md) `CVE-2026-77996` · CVE record: yootheme.com YOOtheme Pro extension for Joomla · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Ultimate Member <= 2.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id Attribute)](https://agentprime.io/advisories/CVE-2026-18547.md) `CVE-2026-18547` · CVE record: ultimatemember Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass](https://agentprime.io/advisories/CVE-2026-16231.md) `CVE-2026-16231` · CVE record: hbs hbs · CVSS 8.1 High · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-76128.md) `CVE-2026-76128` · CVE record: implecode eCommerce Product Catalog · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Reflected XSS in AshAuthentication confirmation and magic link interaction forms](https://agentprime.io/advisories/GHSA-54fc-x3hv-ffhw.md) `GHSA-54fc-x3hv-ffhw`, `CVE-2026-66882`, `EEF-CVE-2026-66882` · Hex `ash_authentication`: affected `>=4.8.0, <4.14.2 || >=5.0.0-rc.0, <5.0.0-rc.13`, fixed in `4.14.2`, `5.0.0-rc.13` · CVSS 2.1 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor](https://agentprime.io/advisories/CVE-2026-18512.md) `CVE-2026-18512` · CVE record: cozmoslabs TranslatePress – Translate Multilingual sites with AI Translation · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Forminator Forms <= 1.57.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'error_description' Parameter](https://agentprime.io/advisories/CVE-2026-18328.md) `CVE-2026-18328` · CVE record: wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder · CVSS 7.2 High · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting](https://agentprime.io/advisories/CVE-2026-18100.md) `CVE-2026-18100` · CVE record: roxnor MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Forminator Forms <= 1.57.0.2 - Unauthenticated Stored Cross-Site Scripting via Radio Field (Save and Continue Draft)](https://agentprime.io/advisories/CVE-2026-18323.md) `CVE-2026-18323` · CVE record: wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder · CVSS 7.2 High · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in the comments bundle (see GHSA-628f-v4f6-p37r)](https://agentprime.io/advisories/PKSA-3fqv-nq39-s3wg.md) `PKSA-3fqv-nq39-s3wg`, `CVE-2026-107845` · Packagist `contao/contao`: affected `>=4.0.0, <5.3.50 || >=5.4.0, <5.7.12`, fixed in `5.3.50`, `5.7.12` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS), CWE-116 - [tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-12561.md) `CVE-2026-12561` · CVE record: tagDiv tagDiv Composer · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute](https://agentprime.io/advisories/CVE-2026-19943.md) `CVE-2026-19943` · CVE record: jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter](https://agentprime.io/advisories/CVE-2026-17089.md) `CVE-2026-17089` · CVE record: netweblogic Events Manager – Calendar, Bookings, Tickets, and more! · CVSS 6.1 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp_featured_video_url' Parameter](https://agentprime.io/advisories/CVE-2026-76063.md) `CVE-2026-76063` · CVE record: roxnor FundEngine – Donation and Crowdfunding Platform · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute](https://agentprime.io/advisories/CVE-2026-75019.md) `CVE-2026-75019` · CVE record: cozythemes Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-9878.md) `CVE-2025-9878` · CVE record: buildwps PPWP – Password Protect Pages · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String](https://agentprime.io/advisories/CVE-2026-56704.md) `CVE-2026-56704` · CVE record: vrana adminer · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [A Stored XSS vulnerability in the subtitle deletion flow in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScr…](https://agentprime.io/advisories/CVE-2026-38473.md) `CVE-2026-38473` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [A Stored XSS vulnerability in forum reward comments in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote attackers to inject arbitrary JavaScript via the c p…](https://agentprime.io/advisories/CVE-2026-38472.md) `CVE-2026-38472` · CVE record · CVSS 6.1 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [A Stored XSS vulnerability in the custom bonus title feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary Jav…](https://agentprime.io/advisories/CVE-2026-38469.md) `CVE-2026-38469` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [A Stored XSS vulnerability in the torrent remaster custom title feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject ar…](https://agentprime.io/advisories/CVE-2026-38466.md) `CVE-2026-38466` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arb…](https://agentprime.io/advisories/CVE-2026-38465.md) `CVE-2026-38465` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS) - [WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-78282.md) `CVE-2026-78282` · CVE record: mra13 Stripe Payments · CVSS 7.1 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-78264.md) `CVE-2026-78264` · CVE record: Site Building with Toolset Toolset Blocks · CVSS 7.1 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-78263.md) `CVE-2026-78263` · CVE record: Nexcess Event Tickets · CVSS 7.1 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-32556.md) `CVE-2026-32556` · CVE record: PixelYourSite Professional Boost · CVSS 7.1 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [Sakai Conversations has a Stored XSS Issue](https://agentprime.io/advisories/GHSA-w2x5-gv52-9ccv.md) `GHSA-w2x5-gv52-9ccv`, `CVE-2026-54049` · Maven `org.sakaiproject.conversations:sakai-conversations-impl` and 2 more: affected `>=23.0, <=23.3`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [Dolibarr < 24.0.0 Reflected XSS via Extra Fields Administration Template](https://agentprime.io/advisories/CVE-2026-71503.md) `CVE-2026-71503` · CVE record: Dolibarr dolibarr · CVSS 5.1 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [Combodo iTop: Reflected XSS in dashboard revert](https://agentprime.io/advisories/CVE-2026-30864.md) `CVE-2026-30864` · CVE record: Combodo iTop · CVSS 8.9 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name](https://agentprime.io/advisories/CVE-2026-76837.md) `CVE-2026-76837` · CVE record: Baserow Baserow · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in Johnson Controls Metasys 14 and others](https://agentprime.io/advisories/CVE-2026-34491.md) `CVE-2026-34491` · CVE record: Johnson Controls Metasys 14 and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name](https://agentprime.io/advisories/CVE-2026-65053.md) `CVE-2026-65053` · CVE record: horde imp · CVSS 5.1 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name](https://agentprime.io/advisories/CVE-2026-78414.md) `CVE-2026-78414` · CVE record: Network Optix Nx Witness VMS · CVSS 8.0 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook](https://agentprime.io/advisories/CVE-2026-78391.md) `CVE-2026-78391` · CVE record: ransomlook ransomlook · CVSS 8.8 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [CVE-2026-17033 CVE Record](https://agentprime.io/advisories/CVE-2026-17033.md) `CVE-2026-17033` · CVE record: Grafana Grafana OSS · CVSS 6.8 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [WordPress Urna theme <= 2.6.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-66610.md) `CVE-2026-66610` · CVE record: thembay Urna · CVSS 7.1 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-32476.md) `CVE-2026-32476` · CVE record: AmpleByte Pvt Limited Brave Conversion Engine (PRO) · CVSS 7.1 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .