# Cross-site scripting (XSS).

Untrusted input rendered as script in someone else’s browser. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WordPress Front End PM plugin <= 11.4.6 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39788.md)
  `CVE-2026-39788` · CVE record: Shamim Hasan Front End PM · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39784.md)
  `CVE-2026-39784` · CVE record: nicdark Hotel Booking · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39781.md)
  `CVE-2026-39781` · CVE record: Dan Rossiter Document Gallery · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39780.md)
  `CVE-2026-39780` · CVE record: Youzify Youzify · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39778.md)
  `CVE-2026-39778` · CVE record: themeansar Ansar Import – One Click Starter Sites – for Elementor \&amp; Themes · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39766.md)
  `CVE-2026-39766` · CVE record: reputeinfosystems ARForms · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39758.md)
  `CVE-2026-39758` · CVE record: Midtrans Midtrans-WooCommerce · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39750.md)
  `CVE-2026-39750` · CVE record: weDevs StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39748.md)
  `CVE-2026-39748` · CVE record: ThemeMove EduMall · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39745.md)
  `CVE-2026-39745` · CVE record: bestweblayout Contact Form to DB by BestWebSoft · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39731.md)
  `CVE-2026-39731` · CVE record: code4life Database for CF7 · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress WC Fields Factory plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39727.md)
  `CVE-2026-39727` · CVE record: Saravana Kumar K WC Fields Factory · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Lumise Product Designer plugin < 2.1.4.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39726.md)
  `CVE-2026-39726` · CVE record: Lumise Lumise Product Designer · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39724.md)
  `CVE-2026-39724` · CVE record: veppa HTTP Requests Manager · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39722.md)
  `CVE-2026-39722` · CVE record: VibeThemes WPLMS · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39720.md)
  `CVE-2026-39720` · CVE record: mapster Mapster WP Maps · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-32577.md)
  `CVE-2026-32577` · CVE record: N-Media Frontend File Manager · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-32575.md)
  `CVE-2026-32575` · CVE record: Fantastic Plugins SUMO Affiliates Pro · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-32574.md)
  `CVE-2026-32574` · CVE record: EDGARROJAS Smart Forms · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-32572.md)
  `CVE-2026-32572` · CVE record: weDevs WP User Frontend Pro · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-32571.md)
  `CVE-2026-32571` · CVE record: Colabrio Ohio Extra · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-32570.md)
  `CVE-2026-32570` · CVE record: DaftPlug Progressify - Progressive Web App (PWA) · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-32569.md)
  `CVE-2026-32569` · CVE record: Joomunited WP Media folder · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [SourceCodester Simple Student Information System Profile Field register.php cross site scripting](https://agentprime.io/advisories/CVE-2026-105809.md)
  `CVE-2026-105809` · CVE record: SourceCodester Simple Student Information System · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection
- [WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-105879.md)
  `CVE-2026-105879` · CVE record: Crocoblock JetElements For Elementor · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [SourceCodester Simple Student Information System searchresults.php clean cross site scripting](https://agentprime.io/advisories/CVE-2026-105808.md)
  `CVE-2026-105808` · CVE record: SourceCodester Simple Student Information System · CVSS 5.1 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection
- [WordPress Payflex Payment Gateway plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-103346.md)
  `CVE-2026-103346` · CVE record: Tomlister Payflex Payment Gateway · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)](https://agentprime.io/advisories/CVE-2026-75962.md)
  `CVE-2026-75962` · CVE record: saadiqbal Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App · CVSS 7.2 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [imgproxy SVG svg.go sanitizeElement cross site scripting](https://agentprime.io/advisories/CVE-2026-105708.md)
  `CVE-2026-105708` · CVE record: imgproxy · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection
- [WordPress Real 3D FlipBook plugin <= 5.5 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-39760.md)
  `CVE-2026-39760` · CVE record: Creative interactive media Real 3D FlipBook · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [SourceCodester Drug Recommendation System add_drug.php cross site scripting](https://agentprime.io/advisories/CVE-2026-105705.md)
  `CVE-2026-105705` · CVE record: SourceCodester Drug Recommendation System · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection
- [DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes](https://agentprime.io/advisories/GHSA-6688-9rhm-gjv2.md)
  `GHSA-6688-9rhm-gjv2`, `CVE-2026-109345` · npm `dompurify`: affected `<3.4.16`, fixed in `3.4.16` · CVSS 5.1 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Joplin whiteboard card rendering allows CSS injection into application chrome](https://agentprime.io/advisories/CVE-2026-105784.md)
  `CVE-2026-105784` · CVE record: laurent22 joplin · CVSS 4.6 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [@vue/server-renderer: XSS via missing CR in attribute-name blacklist](https://agentprime.io/advisories/GHSA-g2v6-rqmx-r4w6.md)
  `GHSA-g2v6-rqmx-r4w6` · npm `@vue/server-renderer`: affected `<3.5.42 || >=3.6.0-rc.0, <3.6.0-rc.6`, fixed in `3.5.42`, `3.6.0-rc.6` · CVSS 7.2 High · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-116
- [ProseMirror has a XSS vulnerability in prosemirror-view's paste handling](https://agentprime.io/advisories/GHSA-c8x8-7fp4-3x9w.md)
  `GHSA-c8x8-7fp4-3x9w`, `CVE-2026-104847` · npm `prosemirror-view`: affected `<1.42.3`, fixed in `1.42.3` · CVSS 8.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Penpot: Stored XSS via Unsanitised SVG Uploads](https://agentprime.io/advisories/CVE-2026-105694.md)
  `CVE-2026-105694` · CVE record: penpot penpot · CVSS 5.4 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-100515.md)
  `CVE-2026-100515` · CVE record: VillaTheme Photo Reviews for WooCommerce · CVSS 7.1 High · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-100509.md)
  `CVE-2026-100509` · CVE record: Webful Creations RepairBuddy · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)](https://agentprime.io/advisories/CVE-2026-105630.md)
  `CVE-2026-105630` · CVE record: makeplane plane · CVSS 8.7 High · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS), Unrestricted file upload, CWE-616
- [Plane: Cross-tenant stored XSS in intake enables account takeover](https://agentprime.io/advisories/CVE-2026-104979.md)
  `CVE-2026-104979` · CVE record: makeplane plane · CVSS 8.7 High · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS), Broken access control
- [WordPress Adsmonetizer plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2025-15643.md)
  `CVE-2025-15643` · CVE record: Jose Fernandez Adsmonetizer · CVSS 7.1 High · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Image Slider Widget plugin <= 1.1.130 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-42700.md)
  `CVE-2026-42700` · CVE record: GhozyLab Image Slider Widget · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Quay: quay: dom-based cross-site scripting via unvalidated redirect_url on signin page](https://agentprime.io/advisories/CVE-2026-102576.md)
  `CVE-2026-102576` · CVE record: Red Hat Red Hat Quay 3 · CVSS 4.2 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter](https://agentprime.io/advisories/CVE-2026-102295.md)
  `CVE-2026-102295` · CVE record: Red Hat Red Hat Quay 3 · CVSS 5.4 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2](https://agentprime.io/advisories/CVE-2026-102426.md)
  `CVE-2026-102426` · CVE record: joomshaper.com SP Page Builder (Pro) extension for Joomla · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation](https://agentprime.io/advisories/CVE-2026-105397.md)
  `CVE-2026-105397` · CVE record: ThimPress LearnPress · CVSS 5.1 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting](https://agentprime.io/advisories/CVE-2026-105291.md)
  `CVE-2026-105291` · CVE record: feelec-yishu feelcrm-os · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Stored XSS vulnerability in OAuth configuration form](https://agentprime.io/advisories/CVE-2026-59788.md)
  `CVE-2026-59788` · CVE record: Zabbix Zabbix · CVSS 5.6 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting](https://agentprime.io/advisories/CVE-2026-105289.md)
  `CVE-2026-105289` · CVE record: feelec-yishu feelcrm-os · CVSS 5.1 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection
- [feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scripting](https://agentprime.io/advisories/CVE-2026-105288.md)
  `CVE-2026-105288` · CVE record: feelec-yishu feelcrm-os · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection
- [WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-102393.md)
  `CVE-2026-102393` · CVE record: Brainstorm Force Starter Templates · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-104396.md)
  `CVE-2026-104396` · CVE record: Jeroen Peters Name Directory · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-102914.md)
  `CVE-2026-102914` · CVE record: Brainstorm Force Presto Player · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Premium Addons for Elementor plugin <= 4.11.109 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-103084.md)
  `CVE-2026-103084` · CVE record: LeapWorx Premium Addons for Elementor · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-105060.md)
  `CVE-2026-105060` · CVE record: Themepoints Logo Showcase · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-104673.md)
  `CVE-2026-104673` · CVE record: Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-105056.md)
  `CVE-2026-105056` · CVE record: impleCode eCommerce Product Catalog · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress QR Redirector plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-105069.md)
  `CVE-2026-105069` · CVE record: Nikki Blight QR Redirector · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-104404.md)
  `CVE-2026-104404` · CVE record: Liquid Web / StellarWP GiveWP · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Mitel MiVoice Office 400 stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-104808.md)
  `CVE-2026-104808` · CVE record: Mitel Mitel MiVoice Office 400 · CVSS 1.9 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Cross-site scripting (XSS)

Newest: <https://agentprime.io/advisories/tag/xss.md>
Older: <https://agentprime.io/advisories/tag/xss.md?cursor=WyIyMDI2LTEwLTA1VDA4OjMwOjU0LjkwOTAwMFoiLCJDVkUtMjAyNi0xMDQ4MDgiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=xss&cursor=WyIyMDI2LTEwLTA2VDA4OjM0OjQzLjYzOTAwMFoiLCJDVkUtMjAyNi0zOTc5MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/xss/?cursor=WyIyMDI2LTEwLTA2VDA4OjM0OjQzLjYzOTAwMFoiLCJDVkUtMjAyNi0zOTc5MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.