Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Unclassified MEDIUM 6.5
CVE-2026-49044

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kruit Advanced Custom Fields: Font Aweso…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified MEDIUM 6.1
CVE-2026-47119

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the appl…

Patch available
Fix from $1,600 2026-05-27
Cognos Analytics HIGH 8.2
CVE-2025-3633

IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS…

Fix: 11.2.4 / 12.0.4+
Fix from $1,950 2026-05-27
Unclassified HIGH 7.1
CVE-2026-42759

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timo Affiliate Super Assistent amazonsimpleadmi…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified HIGH 7.1
CVE-2026-42762

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS …

Mitigation only
Fix from $1,950 2026-05-27
Unclassified MEDIUM 6.5
CVE-2026-42750

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete wpcomplete allows Stored XSS…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified MEDIUM 6.5
CVE-2026-42751

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking Manager booking-manager allow…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified HIGH 7.1
CVE-2026-42754

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phbernard Favicon favicon-by-realfavicongenerat…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified HIGH 7.1
CVE-2026-42738

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZAYTECH Smart Online Order for Clover clover-on…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified HIGH 7.1
CVE-2026-42739

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IniLerm Advanced IP Blocker advanced-ip-blocker…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified HIGH 7.1
CVE-2026-42728

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform all…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified HIGH 7.1
CVE-2026-42729

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows …

Mitigation only
Fix from $1,950 2026-05-27
Unclassified HIGH 7.1
CVE-2026-42733

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 WPCS currency-switcher allows DOM-Ba…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified HIGH 7.1
CVE-2026-42734

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflec…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified MEDIUM 6.1
CVE-2026-3349

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all ve…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified MEDIUM 6.5
CVE-2026-48968

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider allows DOM-Based XSS. Thi…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified HIGH 7.1
CVE-2025-52747

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Themebox - Digital Products Ecommerce a…

Mitigation only
Fix from $1,950 2026-05-27
Safe Access MEDIUM 5.9
CVE-2025-10466

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.…

Fix: 1.3.1-0329+
Fix from $1,600 2026-05-27
Contacts MEDIUM 5.4
CVE-2025-13167

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts befo…

Fix: 1.0.10-20659+
Fix from $1,600 2026-05-27
Unclassified HIGH 7.1
CVE-2025-22741

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RiceTheme Felan Framework allows Reflected XSS.…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified MEDIUM 6.4
CVE-2026-8042

The Github Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'repo' shortcode attribute in the 'github' shortcode i…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified HIGH 7.2
CVE-2026-8143

The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb_country_iso', 'hb_usa_state_iso', and 'hb_canada_province_iso…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified MEDIUM 6.4
CVE-2026-2030

The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[lvca_carousel]` and `[lvca_p…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified MEDIUM 6.1
CVE-2026-3001

The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified HIGH 7.2
CVE-2026-3375

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespee…

Mitigation only
Fix from $1,950 2026-05-27
Unclassified MEDIUM 6.4
CVE-2026-8899

The Auto Thumbnail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'thumbnails' shortcode in all versions up to, and includ…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified MEDIUM 6.4
CVE-2026-8875

The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' (and 'c') shortcode in ve…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified MEDIUM 6.4
CVE-2026-8877

The Responsive Video Embedder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rem_video' shortcode in versions up to, and …

Mitigation only
Fix from $1,600 2026-05-27
Unclassified MEDIUM 6.4
CVE-2026-8884

The Instant-Quote.co Quotation Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to,…

Mitigation only
Fix from $1,600 2026-05-27
Unclassified MEDIUM 6.4
CVE-2026-8886

The hk_shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title-plane' shortcode in versions up to, and including, …

Mitigation only
Fix from $1,600 2026-05-27