# Cross-site scripting (XSS).

Untrusted input rendered as script in someone else’s browser. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-94668.md)
  `CVE-2026-94668` · CVE record: Dimitri Grassi Salon booking system · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-94667.md)
  `CVE-2026-94667` · CVE record: Crocoblock JetReviews · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-94665.md)
  `CVE-2026-94665` · CVE record: Mamunur Rashid Classified Listing · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-94661.md)
  `CVE-2026-94661` · CVE record: Crocoblock JetBlog · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-94641.md)
  `CVE-2026-94641` · CVE record: Stiofan UsersWP · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.58 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-94632.md)
  `CVE-2026-94632` · CVE record: Stiofan BlockStrap Page Builder - Bootstrap Blocks · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-94415.md)
  `CVE-2026-94415` · CVE record: Muffingroup Betheme · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress UpSolution Core plugin < 9.4.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-94166.md)
  `CVE-2026-94166` · CVE record: UpSolution UpSolution Core · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-96761.md)
  `CVE-2026-96761` · CVE record: Welcart Welcart e-Commerce · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-95609.md)
  `CVE-2026-95609` · CVE record: David Lingren Media LIbrary Assistant · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-95598.md)
  `CVE-2026-95598` · CVE record: codepeople Search in Place · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-95596.md)
  `CVE-2026-95596` · CVE record: Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-95591.md)
  `CVE-2026-95591` · CVE record: e4jvikwp VikBooking Hotel Booking Engine & PMS · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-95608.md)
  `CVE-2026-95608` · CVE record: PluginUs.Net HUSKY · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress FiboSearch plugin <= 1.34.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-96553.md)
  `CVE-2026-96553` · CVE record: Damian Góra FiboSearch · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-62049.md)
  `CVE-2026-62049` · CVE record: Crocoblock JetBlocks For Elementor · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Reflected Cross-Site Scripting in BeeTienda eCommerce platform](https://agentprime.io/advisories/CVE-2026-4264.md)
  `CVE-2026-4264` · CVE record: BeeTienda eCommerce Platform · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers](https://agentprime.io/advisories/CVE-2026-106155.md)
  `CVE-2026-106155` · CVE record: Progress Software Telerik Report Server · CVSS 8.9 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter](https://agentprime.io/advisories/CVE-2026-81929.md)
  `CVE-2026-81929` · CVE record: OceanWP Ocean Pro Demos and 1 more · CVSS 7.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Keycloak-services: keycloak-services: stored xss on login page via kcsanitize bypass](https://agentprime.io/advisories/CVE-2026-107889.md)
  `CVE-2026-107889` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature.](https://agentprime.io/advisories/CVE-2026-79363.md)
  `CVE-2026-79363` · CVE record · CVSS 5.9 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Recognize yield as regexp preceder keyword in html/template](https://agentprime.io/advisories/GO-2026-6600.md)
  `GO-2026-6600`, `BIT-golang-2026-97030`, `CVE-2026-97030` · Go `stdlib`: affected `<1.26.9 || >=1.27.0-0, <1.27.2`, fixed in `1.26.9`, `1.27.2` · CVSS 6.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Reset context tracking on consecutive template expressions in html/template](https://agentprime.io/advisories/GO-2026-6599.md)
  `GO-2026-6599`, `BIT-golang-2026-94448`, `CVE-2026-94448` · Go `stdlib`: affected `<1.26.9 || >=1.27.0-0, <1.27.2`, fixed in `1.26.9`, `1.27.2` · CVSS 6.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Indico: Cross-Site-Scripting in minutes editor](https://agentprime.io/advisories/GHSA-cw24-x4mj-fw3q.md)
  `GHSA-cw24-x4mj-fw3q`, `CVE-2026-107397`, `PYSEC-2026-4228` · PyPI `indico`: affected `<3.3.13`, fixed in `3.3.13` · CVSS 4.4 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Jivejdon through 5.0 Stored XSS via Attachment Upload Content-Type](https://agentprime.io/advisories/CVE-2026-107801.md)
  `CVE-2026-107801` · CVE record: banq jivejdon · CVSS 5.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Jivejdon through 5.0 Stored XSS via Private Short Messages](https://agentprime.io/advisories/CVE-2026-107800.md)
  `CVE-2026-107800` · CVE record: banq jivejdon · CVSS 5.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Jivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message Rendering](https://agentprime.io/advisories/CVE-2026-107799.md)
  `CVE-2026-107799` · CVE record: banq jivejdon · CVSS 5.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filter](https://agentprime.io/advisories/CVE-2026-107798.md)
  `CVE-2026-107798` · CVE record: banq jivejdon · CVSS 5.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Jivejdon through 5.0 Reflected XSS via postThread.jsp to and tag Parameters](https://agentprime.io/advisories/CVE-2026-107797.md)
  `CVE-2026-107797` · CVE record: banq jivejdon · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parameters](https://agentprime.io/advisories/CVE-2026-107796.md)
  `CVE-2026-107796` · CVE record: banq jivejdon · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Satel Netco Design Cross-site Scripting](https://agentprime.io/advisories/CVE-2026-105269.md)
  `CVE-2026-105269` · CVE record: Satel Satel Netco Design · CVSS 8.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-17189.md)
  `CVE-2026-17189` · CVE record: IBM Security Verify Access and 3 more · CVSS 8.2 High · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-11936.md)
  `CVE-2026-11936` · CVE record: IBM Security Verify Access and 3 more · CVSS 4.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-78407.md)
  `CVE-2026-78407` · CVE record: IBM Security Verify Access and 3 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [FreeScout: Stored HTML Injection in Administrator Alert Emails via Spoofed CF-Connecting-IP Header](https://agentprime.io/advisories/CVE-2026-107393.md)
  `CVE-2026-107393` · CVE record: freescout-help-desk freescout · CVSS 6.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-116
- [enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision](https://agentprime.io/advisories/GHSA-9rjx-3jch-6vjf.md)
  `GHSA-9rjx-3jch-6vjf`, `CVE-2026-107380`, `PKSA-8j6w-3kr7-s9xk` · Packagist `enshrined/svg-sanitize`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 5.4 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [IBM Guardium Data Protection Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-84244.md)
  `CVE-2026-84244` · CVE record: IBM Guardium Data Protection · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress aBlocks plugin <= 2.16.0 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-40804.md)
  `CVE-2026-40804` · CVE record: Kodezen LLC aBlocks · CVSS 7.1 High · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob](https://agentprime.io/advisories/GHSA-9ffp-22j7-56r2.md)
  `GHSA-9ffp-22j7-56r2`, `CVE-2026-107303` · npm `generator-jhipster` and 1 more: affected `<9.4.0`, fixed in `9.4.0` · CVSS 7.6 High · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter Bypass](https://agentprime.io/advisories/CVE-2026-104078.md)
  `CVE-2026-104078` · CVE record: Obsidian Obsidian Desktop · CVSS 8.4 High · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-1188
- [Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown](https://agentprime.io/advisories/CVE-2026-104077.md)
  `CVE-2026-104077` · CVE record: Obsidian Obsidian Desktop · CVSS 8.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-1188
- [EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form](https://agentprime.io/advisories/CVE-2026-105831.md)
  `CVE-2026-105831` · CVE record: espocrm espocrm · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [IBM DataPower Gateway Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-13258.md)
  `CVE-2026-13258` · CVE record: IBM DataPower Gateway 10.6CD and 3 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [IBM DataPower Gateway affected by cross-site scripting](https://agentprime.io/advisories/CVE-2026-14990.md)
  `CVE-2026-14990` · CVE record: IBM DataPower Gateway 10.6.0 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [HTML Injection in İzometri Informatics' eimzamip](https://agentprime.io/advisories/CVE-2026-89290.md)
  `CVE-2026-89290` · CVE record: İzometri IT Services Domestic and Foreign Trade Co. Ltd. eimzamip · CVSS 3.5 Low · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Zotpress plugin <= 7.4.4 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-27420.md)
  `CVE-2026-27420` · CVE record: Katie Seaborn Zotpress · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-62127.md)
  `CVE-2026-62127` · CVE record: MediaRon LLC WP Plugin Info Card · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-105079.md)
  `CVE-2026-105079` · CVE record: StylemixThemes MasterStudy LMS · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-105890.md)
  `CVE-2026-105890` · CVE record: Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-105078.md)
  `CVE-2026-105078` · CVE record: WP Store Locator WP Store Locator · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Robo Gallery plugin <= 5.1.6 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-105887.md)
  `CVE-2026-105887` · CVE record: Robosoft Robo Gallery · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-103070.md)
  `CVE-2026-103070` · CVE record: ShortPixel ShortPixel Image Optimizer · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServer](https://agentprime.io/advisories/CVE-2026-103647.md)
  `CVE-2026-103647` · CVE record: Progressive Robot Ltd hMailServer · CVSS 8.0 High · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Stored Cross-Site Scripting in SQLView KRIS](https://agentprime.io/advisories/CVE-2026-89191.md)
  `CVE-2026-89191` · CVE record: SQLView SQLView KRIS · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode Attributes](https://agentprime.io/advisories/CVE-2026-104646.md)
  `CVE-2026-104646` · CVE record: Unknown Image Photo Gallery Final Tiles Grid · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [GPTranslate < 2.34.14 - Unauthenticated Stored XSS via REST API Translation Storage](https://agentprime.io/advisories/CVE-2026-103309.md)
  `CVE-2026-103309` · CVE record: Unknown GPTranslate · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Brocade Active Support Connectivity Gateway](https://agentprime.io/advisories/CVE-2023-5648.md)
  `CVE-2023-5648` · CVE record: Brocade Active Support Connectivity Gateway · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Aurora Heatmap <= 1.7.2 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter](https://agentprime.io/advisories/CVE-2026-94154.md)
  `CVE-2026-94154` · CVE record: r3098 Aurora Heatmap · CVSS 6.1 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Ghost: Stored XSS via Embed Card Previews](https://agentprime.io/advisories/GHSA-69qc-f5m6-889c.md)
  `GHSA-69qc-f5m6-889c`, `BIT-ghost-2026-105643`, `CVE-2026-105643` · npm `ghost`: affected `>=6.34.0, <6.67.0`, fixed in `6.67.0` · CVSS 7.3 High · Not analysed yet · Published 7 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-653
- [Ghost : Stored XSS via SVG Files in Content Imports](https://agentprime.io/advisories/GHSA-hqq2-xqr2-fmx2.md)
  `GHSA-hqq2-xqr2-fmx2`, `BIT-ghost-2026-105644`, `CVE-2026-105644` · npm `ghost`: affected `>=4.0.0, <6.67.0`, fixed in `6.67.0` · CVSS 6.8 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Cross-site scripting (XSS), Unrestricted file upload

Newest: <https://agentprime.io/advisories/tag/xss.md>
Older: <https://agentprime.io/advisories/tag/xss.md?cursor=WyIyMDI2LTEwLTA3VDIwOjQzOjAzLjAwMDAwMFoiLCJHSFNBLWhxcTIteHFyMi1mbXgyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=xss&cursor=WyIyMDI2LTEwLTA5VDEwOjAwOjM0LjMwMzAwMFoiLCJDVkUtMjAyNi05NjMzMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/xss/?cursor=WyIyMDI2LTEwLTA5VDEwOjAwOjM0LjMwMzAwMFoiLCJDVkUtMjAyNi05NjMzMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.