Advisories · Weakness
Cross-site scripting (XSS).
Untrusted input rendered as script in someone else’s browser. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 4.4 Medium
Cross-site scripting in xapian-core
- xapian-core
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Cross-site scripting in Znuny
- Znuny
- Cross-site scripting (XSS)
- CVSS 8.6 High
Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page
- Shaarli
- Cross-site scripting (XSS)
- CVSS 4.5 Medium
Winter: Reflected XSS through the search query parameter in the backend Table widget
- Cross-site scripting (XSS)
>=1.0.420, <1.2.14 · fixed in 1.2.14
GHSA-hq84-x37p-j6q5 · CVE-2026-125340 - CVSS 4.5 Medium
Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles
- Cross-site scripting (XSS)
<1.2.14 · fixed in 1.2.14
GHSA-5cwr-5jxg-pcf6 · CVE-2026-125338 - CVSS 2.0 Low
Winter: Stored XSS through Backend List widget image columns
- Cross-site scripting (XSS)
>=1.1.0, <1.2.14 · fixed in 1.2.14
GHSA-7mpf-4465-7fc2 · CVE-2026-125341 - CVSS 4.4 Medium
django CMS: Stored XSS in edit-mode plugin exception rendering
- Cross-site scripting (XSS)
>=5.0.8, <5.0.9 · fixed in 5.0.9
GHSA-hvq6-2r72-p2x7 · CVE-2026-75526 - CVSS 7.3 High
Wagtail: Reflected XSS in dynamic image URL generator view
- Cross-site scripting (XSS)
>=7.3, <7.3.3 || >=7.4, <7.4.2 · fixed in 7.3.3, 7.4.2
GHSA-23m2-mghx-vqmf · CVE-2026-54263 - CVSS 5.4 Medium
Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted
- Cross-site scripting (XSS)
- CWE-1023
>=6.0.0, <6.8.14 || >=7.0.0, <7.0.38 · fixed in 6.8.14, 7.0.38
GHSA-mmg4-322v-6jvc · CVE-2026-54181 - CVSS 4.4 Medium
Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk
- Cross-site scripting (XSS)
- Unrestricted file upload
>=6.0.0, <6.8.14 || >=7.0.0, <7.0.38 · fixed in 6.8.14, 7.0.38
GHSA-8hw4-7qjr-3wxg · CVE-2026-54179 - CVSS 4.8 Medium
Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings
- Other injection
- Cross-site scripting (XSS)
<2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2 · fixed in 2.29.17, 2.32.7, 2.33.8, 2.34.2
GHSA-h58c-xccx-75m3 · CVE-2026-111932 - CVSS 5.4 Medium
Mongoose: Reflected XSS via decoded URI in directory listing render
- cesanta mongoose
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Mongoose: Stored XSS via unescaped filenames in directory listing
- cesanta mongoose
- Cross-site scripting (XSS)
- CVSS 8.5 High
CVAT: Stored XSS via annotation guides in audio tasks
- cvat
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Reflected XSS in ATutor
- ATutor
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Reflected XSS in ATutor
- ATutor
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Stored XSS in ATutor
- ATutor
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability
- Hakan Ozevin WP BASE Booking
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress NotificationX Pro plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability
- NotificationX Pro
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Flatastic theme <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
- Monkeysan Flatastic
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability
- Form Maker by 10Web
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability
- Eric Teubert Podlove Podcast Publisher
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress SEO Plugin by Squirrly SEO plugin <= 14.2.2 - Cross Site Scripting (XSS) vulnerability
- SEO Squirrly SEO Plugin by Squirrly SEO
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability
- thembay Aora
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Paymob for WooCommerce plugin <= 4.1.10 - Cross Site Scripting (XSS) vulnerability
- Paymob for WooCommerce
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
- ThemeHunk Advance Product Search
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
- ThemeGrill SmartSMTP
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability
- HasThemes Swatchly – WooCommerce Variation Swatches for Products
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
- Paolo GeoDirectory
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress B2BKing Premium plugin <= 5.6.07 - Cross Site Scripting (XSS) vulnerability
- Kingtech LLC. B2BKing Premium
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress wpDataTables plugin <= 6.5.1.4 - Cross Site Scripting (XSS) vulnerability
- Melograno Venture Studio wpDataTables
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Tagembed plugin <= 7.4 - Cross Site Scripting (XSS) vulnerability
- Tagembed
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability
- Cozmoslabs TranslatePress
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability
- Crocoblock. Jetimpex Inc. JetEngine
- Cross-site scripting (XSS)
- CVSS 8.4 High
n8n before 1.123.69 Stored XSS via Form Completion Page
- n8n
- Cross-site scripting (XSS)
- CVSS 8.6 High
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12
- icagenda.com iCagenda extension for Joomla
- Cross-site scripting (XSS)
- CVSS 8.6 High
Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7
- phoca.cz Phoca Cart extension for Joomla
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4
- phoca.cz Phoca Download extension for Joomla
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7
- phoca.cz Phoca Cart extension for Joomla
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Cross-site scripting in Thinkingreed Inc. F-RevoCRM
- Thinkingreed Inc. F-RevoCRM
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Kirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload
- Kirki
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload
- GutenKit
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC
- Admin and Site Enhancements (ASE)
- Cross-site scripting (XSS)
- CVSS 4.0 Medium
Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
- Splunk SOAR
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise
- Splunk Enterprise
- Cross-site scripting (XSS)
- CVSS 7.1 High
Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise
- Splunk Enterprise
- Cross-site scripting (XSS)
- CVSS 5.7 Medium
Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise
- Splunk Enterprise
- Cross-site scripting (XSS)
- CVSS 7.3 High
Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
- Splunk Enterprise
- Cross-site scripting (XSS)
- CVSS 5.7 Medium
Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise
- Splunk Enterprise
- Cross-site scripting (XSS)
- CVSS 5.7 Medium
Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
- Splunk Enterprise
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise
- Splunk Enterprise
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Lemmy: Stored XSS via markdown image alt-text in lemmy-ui html5-embed
- lemmy
- Cross-site scripting (XSS)
- CVSS 9.6 CriticalCritical · CVSS 9+
Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite
- etherpad
- Cross-site scripting (XSS)
- CVSS 6.3 Medium
Snipe-IT: Stored DOM XSS via table selected-count IDs
- Cross-site scripting (XSS)
<8.6.2 · fixed in 8.6.2
GHSA-c8qc-wf67-342w · CVE-2026-61807 - CVSS 7.6 High
Wekan: Stored XSS in HTML board exports through a card-title second parse
- wekan
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record
- Netgate pfSense Plus
- Netgate pfSense CE
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
- Cisco Industrial Ethernet Switches
- Cross-site scripting (XSS)
- CVSS 8.5 High
Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers
- getgrav grav-plugin-shortcode-core
- Cross-site scripting (XSS)
- CVSS 7.2 High
HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason
- HumHub
- Cross-site scripting (XSS)