# Cross-site scripting (XSS).

Untrusted input rendered as script in someone else’s browser. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.21 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-90986.md)
  `CVE-2026-90986` · CVE record: CODEPRESS IT Solutions LLC Visitor Traffic Real Time Statistics Pro · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpoint](https://agentprime.io/advisories/CVE-2026-91014.md)
  `CVE-2026-91014` · CVE record: Unknown Realtyna Organic IDX plugin + WPL Real Estate · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [EWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference Expansion](https://agentprime.io/advisories/CVE-2026-91011.md)
  `CVE-2026-91011` · CVE record: Unknown EWWW Image Optimizer · CVSS 6.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Dictionary <= 1.0 - Unauthenticated Stored XSS via Direct Dictionary Update](https://agentprime.io/advisories/CVE-2026-88792.md)
  `CVE-2026-88792` · CVE record: Unknown Dictionary · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Dewa Kirim <= 1.0.0 - Unauthenticated Stored XSS via Checkout Coordinates](https://agentprime.io/advisories/CVE-2026-87786.md)
  `CVE-2026-87786` · CVE record: Unknown Dewa Kirim · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [HT Mega 3.2.0 - 3.2.5 - Contributor+ Stored XSS via Section Headline Tag](https://agentprime.io/advisories/CVE-2026-86788.md)
  `CVE-2026-86788` · CVE record: Unknown HT Mega Addons for Elementor · CVSS 6.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs](https://agentprime.io/advisories/CVE-2026-85130.md)
  `CVE-2026-85130` · CVE record: Unknown WPLP Cookie Consent · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Dictionary <= 1.0 - Reflected XSS via Multiple Parameters](https://agentprime.io/advisories/CVE-2025-15697.md)
  `CVE-2025-15697` · CVE record: Unknown Dictionary · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes](https://agentprime.io/advisories/CVE-2026-86311.md)
  `CVE-2026-86311` · CVE record: 10web Photo Gallery by 10Web – Mobile-Friendly Image Gallery · CVSS 6.4 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpicker_more.aspx.](https://agentprime.io/advisories/CVE-2021-3030.md)
  `CVE-2021-3030` · CVE record · CVSS 6.1 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Grav: Stored CSS injection via Markdown image resize() bypasses prior media style sanitizers in Grav](https://agentprime.io/advisories/GHSA-ffmg-hfvg-jhg9.md)
  `GHSA-ffmg-hfvg-jhg9`, `CVE-2026-58657`, `PKSA-fkd8-syrt-878t` · Packagist `getgrav/grav`: affected `>=2.0.0-rc.9, <2.0.0`, fixed in `2.0.0` · CVSS 4.8 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [@nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration](https://agentprime.io/advisories/GHSA-mxm6-v9r6-r94c.md)
  `GHSA-mxm6-v9r6-r94c`, `CVE-2026-63671` · npm `@nuxtjs/mdc`: affected `<0.22.1`, fixed in `0.22.1` · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [Grav: XSS Blueprint Validation Bypass via Twig String Concatenation](https://agentprime.io/advisories/GHSA-2c4f-86xc-cr74.md)
  `GHSA-2c4f-86xc-cr74`, `CVE-2026-61453`, `PKSA-y2jw-px84-6zx6` · Packagist `getgrav/grav`: affected `>=2.0.0, <2.0.1`, fixed in `2.0.1` · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection, CWE-184
- [djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags](https://agentprime.io/advisories/GHSA-4mf4-73j6-mvrw.md)
  `GHSA-4mf4-73j6-mvrw`, `CVE-2026-61597`, `PYSEC-2026-4037` · PyPI `djust`: affected `<1.0.7`, fixed in `1.0.7` · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Craft CMS 5.7.0 before 5.10.13 Stored XSS via Generated Fields](https://agentprime.io/advisories/CVE-2026-92590.md)
  `CVE-2026-92590` · CVE record: craftcms cms · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header](https://agentprime.io/advisories/CVE-2026-92584.md)
  `CVE-2026-92584` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [changedetection.io through 0.60.6 Cross-Site Scripting via watch_title](https://agentprime.io/advisories/CVE-2026-92814.md)
  `CVE-2026-92814` · CVE record: dgtlmoon changedetection.io · CVSS 2.3 Low · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2026-20309.md)
  `CVE-2026-20309` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [ChangeWeDer crm Save Endpoint customer.serve.js cross site scripting](https://agentprime.io/advisories/CVE-2026-92418.md)
  `CVE-2026-92418` · CVE record: ChangeWeDer crm · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2026-84397.md)
  `CVE-2026-84397` · CVE record: Adobe Adobe Experience Manager as a Cloud Service and 2 more · CVSS 5.4 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Concrete CMS before 9.5.4 stored is vulneratble to cross-site scripting via unauthenticated XML/XSLT file upload in the Form Block](https://agentprime.io/advisories/CVE-2026-85386.md)
  `CVE-2026-85386` · CVE record: Concrete CMS Concrete CMS · CVSS 7.3 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Concrete CMS below 9.5.4 is vulnerable to Stored XSS via User Timezone Field](https://agentprime.io/advisories/CVE-2026-85385.md)
  `CVE-2026-85385` · CVE record: Concrete CMS Concrete CMS · CVSS 7.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [SourceCodester Online Food Ordering System Category Update update_category.php cross site scripting](https://agentprime.io/advisories/CVE-2026-92385.md)
  `CVE-2026-92385` · CVE record: SourceCodester Online Food Ordering System · CVSS 4.8 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection
- [PbootCMS Template Rendering ContentController.php decode_string cross site scripting](https://agentprime.io/advisories/CVE-2026-92381.md)
  `CVE-2026-92381` · CVE record: PbootCMS · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Cross-site scripting in Jenkins Project Jenkins Gitee Plugin](https://agentprime.io/advisories/CVE-2026-92140.md)
  `CVE-2026-92140` · CVE record: Jenkins Project Jenkins Gitee Plugin · CVSS 6.8 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Jenkins Project Jenkins OWASP Dependency-Check Plugin](https://agentprime.io/advisories/CVE-2026-92136.md)
  `CVE-2026-92136` · CVE record: Jenkins Project Jenkins OWASP Dependency-Check Plugin · CVSS 8.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Jenkins Project Jenkins Coverage Plugin](https://agentprime.io/advisories/CVE-2026-92135.md)
  `CVE-2026-92135` · CVE record: Jenkins Project Jenkins Coverage Plugin · CVSS 8.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Jenkins Project Jenkins Warnings Plugin](https://agentprime.io/advisories/CVE-2026-92134.md)
  `CVE-2026-92134` · CVE record: Jenkins Project Jenkins Warnings Plugin · CVSS 8.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Advantech EKI-1242IEIMS and others](https://agentprime.io/advisories/CVE-2026-73169.md)
  `CVE-2026-73169` · CVE record: Advantech EKI-1242IEIMS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab](https://agentprime.io/advisories/CVE-2026-19619.md)
  `CVE-2026-19619` · CVE record: GitLab GitLab · CVSS 4.7 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab](https://agentprime.io/advisories/CVE-2026-78252.md)
  `CVE-2026-78252` · CVE record: GitLab GitLab · CVSS 8.2 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source](https://agentprime.io/advisories/CVE-2026-86784.md)
  `CVE-2026-86784` · CVE record: Unknown Visualizer · CVSS 6.8 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter](https://agentprime.io/advisories/CVE-2026-86444.md)
  `CVE-2026-86444` · CVE record: Unknown LearnPress · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor Parameter](https://agentprime.io/advisories/CVE-2026-84829.md)
  `CVE-2026-84829` · CVE record: Unknown Optimole · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Xpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle Widget](https://agentprime.io/advisories/CVE-2026-84088.md)
  `CVE-2026-84088` · CVE record: Unknown Xpro Addons — 140+ Widgets for Elementor · CVSS 6.8 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field Names](https://agentprime.io/advisories/CVE-2026-76558.md)
  `CVE-2026-76558` · CVE record: Unknown WP Import Export Lite · CVSS 6.8 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting via 'icn' Parameter](https://agentprime.io/advisories/CVE-2026-18555.md)
  `CVE-2026-18555` · CVE record: wordplus Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots · CVSS 6.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter](https://agentprime.io/advisories/CVE-2026-5920.md)
  `CVE-2026-5920` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Advanced Popups <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Field](https://agentprime.io/advisories/CVE-2026-11996.md)
  `CVE-2026-11996` · CVE record: codesupplyco Advanced Popups · CVSS 6.4 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WP-Lister Lite for eBay <= 3.8.9 - Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request](https://agentprime.io/advisories/CVE-2026-18595.md)
  `CVE-2026-18595` · CVE record: wp-lab WP-Lister Lite for eBay · CVSS 7.2 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scripting](https://agentprime.io/advisories/CVE-2026-92214.md)
  `CVE-2026-92214` · CVE record: a2ui-project a2ui · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection
- [kkFileView 5.0.0 through 5.0.2 allows reflected XSS via the /onlinePreview endpoint.](https://agentprime.io/advisories/CVE-2026-88593.md)
  `CVE-2026-88593` · CVE record · CVSS 6.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Reflected Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-15639.md)
  `CVE-2026-15639` · CVE record: Delinea Secret Server (On-Prem) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks](https://agentprime.io/advisories/CVE-2026-92257.md)
  `CVE-2026-92257` · CVE record: Netcore NR255-V · CVSS 5.1 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields](https://agentprime.io/advisories/CVE-2026-76873.md)
  `CVE-2026-76873` · CVE record: Netcore NR255-V · CVSS 5.1 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages](https://agentprime.io/advisories/CVE-2026-76872.md)
  `CVE-2026-76872` · CVE record: Netcore NR255-V · CVSS 5.1 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers](https://agentprime.io/advisories/CVE-2026-76867.md)
  `CVE-2026-76867` · CVE record: Netcore NR255-V · CVSS 5.1 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names](https://agentprime.io/advisories/CVE-2026-76864.md)
  `CVE-2026-76864` · CVE record: Netcore NR255-V · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi](https://agentprime.io/advisories/CVE-2026-76858.md)
  `CVE-2026-76858` · CVE record: Netcore NR255-V · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors](https://agentprime.io/advisories/CVE-2026-92234.md)
  `CVE-2026-92234` · CVE record: Webkul QloApps · CVSS 5.1 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Concrete CMS before 9.5.3 is vulnerable to Stored XSS via SVG upload in "Reject" sanitization mode](https://agentprime.io/advisories/CVE-2026-81927.md)
  `CVE-2026-81927` · CVE record: Concrete CMS Concrete CMS · CVSS 1.8 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Concrete CMS 9.4.0 through 9.5.2 is vulnerable to Cross-site scripting in the location panel duplicate-path confirmation dialog](https://agentprime.io/advisories/CVE-2026-81926.md)
  `CVE-2026-81926` · CVE record: Concrete CMS Concrete CMS · CVSS 2.0 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Concrete CMS below 9.5.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via Conversation Custom Date Format](https://agentprime.io/advisories/CVE-2026-81925.md)
  `CVE-2026-81925` · CVE record: Concrete CMS Concrete CMS · CVSS 2.1 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-76704.md)
  `CVE-2026-76704` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 5.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Concrete CMS below 9.5.2 is vulnerable to Stored XSS via unescaped Express entry labels in association selectors](https://agentprime.io/advisories/CVE-2026-68534.md)
  `CVE-2026-68534` · CVE record: Concrete CMS Concrete CMS · CVSS 2.3 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboard](https://agentprime.io/advisories/CVE-2026-81899.md)
  `CVE-2026-81899` · CVE record: Concrete CMS Concrete CMS · CVSS 7.3 High · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page Names](https://agentprime.io/advisories/CVE-2026-18113.md)
  `CVE-2026-18113` · CVE record: Concrete CMS Concrete CMS · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via country-less Address attribute in Express association views](https://agentprime.io/advisories/CVE-2026-81898.md)
  `CVE-2026-81898` · CVE record: Concrete CMS Concrete CMS · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-12749.md)
  `CVE-2026-12749` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-12750.md)
  `CVE-2026-12750` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS)

Newest: <https://agentprime.io/advisories/tag/xss.md>
Older: <https://agentprime.io/advisories/tag/xss.md?cursor=WyIyMDI2LTA5LTE1VDE3OjA0OjI3Ljk0OTAwMFoiLCJDVkUtMjAyNi0xMjc1MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=xss&cursor=WyIyMDI2LTA5LTE3VDEzOjI0OjM5LjA0NjAwMFoiLCJDVkUtMjAyNi02NjU3MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/xss/?cursor=WyIyMDI2LTA5LTE3VDEzOjI0OjM5LjA0NjAwMFoiLCJDVkUtMjAyNi02NjU3MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.