Saltar al contenido
DUPIN
ALERTAS · EN VIVO
Contacto

Cross-site scripting (XSS) (CWE-79)

TIPO DE FALLA273 CVE · PÁGINA 9

  1. VULNERABILIDAD CVE-2026-95807Cross-site scripting almacenado en FV Player 8 vía atributo 'synopsis' del shortcode foliovisionCross-site scripting (XSS) 6.4MEDIA
  2. VULNERABILIDAD CVE-2026-97020Cross-site scripting almacenado en PO/MO Editor vía parámetro 'podata' dougwollisonCross-site scripting (XSS) 6.4MEDIA
  3. VULNERABILIDAD CVE-2026-97398Cross-site scripting almacenado en FV Flowplayer Video Player vía atributo 'synopsis' del shortcode foliovisionCross-site scripting (XSS) 7.2ALTA
  4. VULNERABILIDAD CVE-2026-101924Cross-site scripting almacenado en NewStatPress vía atributo 'urlrequested' de la query string ice00Cross-site scripting (XSS) 7.2ALTA
  5. VULNERABILIDAD CVE-2026-103369Cross-site scripting almacenado en Social Share Buttons & Analytics vía parámetro 'response' joaoromaoCross-site scripting (XSS) 6.4MEDIA
  6. VULNERABILIDAD CVE-2026-103422Cross-site scripting almacenado sin autenticación en AnyComment vía 'email' ateshabaevCross-site scripting (XSS) 7.2ALTA
  7. EXPLOIT PÚBLICO CVE-2026-105950Cross-site scripting en el sanitizador de URI de getformwork getformworkCross-site scripting (XSS) 3.5BAJA
  8. VULNERABILIDAD CVE-2026-110239Cross-site scripting almacenado en el componente rich-text de Rapyd Admin zofeCross-site scripting (XSS) 4.4MEDIA
  9. VULNERABILIDAD CVE-2026-53711Cross-site scripting almacenado en Global Prompts de MCP ContextForge IBMCross-site scripting (XSS) 5.1MEDIA
  10. VULNERABILIDAD CVE-2026-78557Cross-site scripting (XSS) en Industrial Edge App Publisher SiemensCross-site scripting (XSS) 8.3ALTA
  11. VULNERABILIDAD CVE-2026-108488Cross-site scripting (XSS) en PowerPack Addons for Elementor IdeaBox CreationsCross-site scripting (XSS) 6.5MEDIA
  12. VULNERABILIDAD CVE-2026-109691Cross-site scripting (XSS) en Prime Slider – Addons For Elementor BdThemesCross-site scripting (XSS) 6.5MEDIA
  13. VULNERABILIDAD CVE-2026-96535Cross-site scripting (XSS) en el portal YouMind YouMindCross-site scripting (XSS) 5.1MEDIA
  14. VULNERABILIDAD CVE-2026-109697Cross-site scripting (XSS) almacenado en el plugin SureCart de WordPress Brainstorm ForceCross-site scripting (XSS) 6.5MEDIA
  15. VULNERABILIDAD CVE-2026-105881Cross-site scripting (XSS) almacenado en el plugin User Registration de WordPress ThemeGrillCross-site scripting (XSS) 6.5MEDIA
  16. VULNERABILIDAD CVE-2026-108487Cross-site scripting (XSS) almacenado en el plugin Books Gallery de WordPress Hossni MubarakCross-site scripting (XSS) 6.5MEDIA
  17. VULNERABILIDAD CVE-2026-54867Cross-site scripting (XSS) almacenado en el plugin Responsive Slider de WordPress GridenCross-site scripting (XSS) 6.5MEDIA
  18. VULNERABILIDAD CVE-2026-54868Cross-site scripting (XSS) almacenado en el plugin FV Simpler SEO de WordPress foliovisionCross-site scripting (XSS) 6.5MEDIA
  19. VULNERABILIDAD CVE-2026-89269Cross-site scripting (XSS) almacenado en WP Testimonials mediante el shortcode wp-testimonials WP TestimonialsCross-site scripting (XSS) 6.8MEDIA
  20. VULNERABILIDAD CVE-2026-54869Cross-site scripting (XSS) almacenado en el plugin IMPress for IDX Broker de WordPress IDX BrokerCross-site scripting (XSS) 6.5MEDIA
  21. VULNERABILIDAD CVE-2026-54870Cross-site scripting (XSS) almacenado en el plugin Weaver Xtreme Theme Support de WordPress wpweaverCross-site scripting (XSS) 6.5MEDIA
  22. VULNERABILIDAD CVE-2026-92883Cross-site scripting (XSS) en la salida resaltada de GitLab GitLabCross-site scripting (XSS) 8.7ALTA
  23. EXPLOIT PÚBLICO CVE-2026-104083XSS almacenado por mutación con contenido MathML en SmarterMail SmartertoolsCross-site scripting (XSS) 6.1MEDIA
  24. VULNERABILIDAD CVE-2026-76976Cross-site scripting (XSS) en SAP NetWeaver Application Server ABAP (SAP GUI for HTML) SAP_SECross-site scripting (XSS) 5.4MEDIA