Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,854 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-106628 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-106631 |
medium | 5.4 | 0.0036 | 2026-10-13 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could | |
CVE-2026-84924 |
medium | 5.4 | 0.0023 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-59188 |
medium | 5.4 | 0.0015 | 2026-10-23 | Part-DB is an open source inventory management system for electronic components. Prior to version 2. | |
CVE-2025-52097 |
medium | 5.4 | 0.0030 | 2026-10-16 | 1 PoC | Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to |
CVE-2026-110078 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110079 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-83960 |
medium | 5.4 | 0.0020 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110075 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110076 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110077 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110073 |
medium | 5.4 | 0.0036 | 2026-10-13 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could | |
CVE-2026-110074 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2024-58289 |
medium | 5.3 | 0.0026 | 2025-12-11 | Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated att | |
CVE-2024-58291 |
medium | 5.3 | 0.0037 | 2025-12-11 | Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated adminis | |
CVE-2024-58297 |
medium | 5.3 | 0.0026 | 2025-12-11 | PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects configura | |
CVE-2024-58304 |
medium | 5.3 | 0.0031 | 2025-12-11 | SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the product descri | |
CVE-2026-97165 |
medium | 5.3 | 0.0014 | 2026-09-27 | Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5. | |
CVE-2026-100753 |
medium | 5.3 | 0.0015 | 2026-09-28 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7 | |
CVE-2026-101109 |
medium | 5.3 | 0.0015 | 2026-09-28 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - | |
CVE-2026-113654 |
medium | 5.3 | 0.0043 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simp | |
CVE-2026-115350 |
medium | 5.3 | 0.0019 | 2026-10-22 | Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emi | |
CVE-2026-116583 |
medium | 5.3 | 0.0027 | 2026-10-26 | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.strin | |
CVE-2026-116823 |
medium | 5.3 | 0.0018 | 2026-10-27 | YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthentic | |
CVE-2026-116824 |
medium | 5.3 | 0.0018 | 2026-10-27 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers | |
CVE-2026-116874 |
medium | 5.3 | 0.0017 | 2026-10-27 | SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability th | |
CVE-2026-116875 |
medium | 5.3 | 0.0017 | 2026-10-27 | SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-116881 |
medium | 5.3 | 0.0015 | 2026-10-27 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows | |
CVE-2026-116884 |
medium | 5.3 | 0.0016 | 2026-10-27 | SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ex | |
CVE-2026-116885 |
medium | 5.3 | 0.0018 | 2026-10-27 | Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability i | |
CVE-2026-116886 |
medium | 5.3 | 0.0014 | 2026-10-27 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that | |
CVE-2026-116887 |
medium | 5.3 | 0.0014 | 2026-10-27 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that | |
CVE-2026-116889 |
medium | 5.3 | 0.0016 | 2026-10-27 | SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that | |
CVE-2026-116892 |
medium | 5.3 | 0.0021 | 2026-10-27 | SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability th | |
CVE-2026-29136 |
medium | 5.3 | 0.0010 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notificat | |
CVE-2026-35052 |
medium | 5.3 | 0.0062 | 2026-04-06 | D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data st | |
CVE-2026-35166 |
medium | 5.3 | 0.0019 | 2026-04-06 | Hugo is a static site generator. From 0.60.0 to before 0.159.2, links and image links in the default | |
CVE-2026-35608 |
medium | 5.3 | 0.0019 | 2026-04-07 | QuickDrop is an easy-to-use file sharing application. Prior to 1.5.3, a stored XSS vulnerability exi | |
CVE-2026-39941 |
medium | 5.3 | 0.0026 | 2026-04-09 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability allows at | |
CVE-2026-6218 |
medium | 5.3 | 0.0028 | 2026-04-13 | A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue is the fun | |
CVE-2026-6559 |
medium | 5.3 | 0.0027 | 2026-04-19 | A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 of | |
CVE-2026-6779 |
medium | 5.3 | 0.0021 | 2026-04-21 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thun | |
CVE-2026-41472 |
medium | 5.3 | 0.0052 | 2026-04-24 | CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Sca | |
CVE-2026-42554 |
medium | 5.3 | 0.0021 | 2026-05-11 | Fiber is a web framework for Go. Prior to 2.52.12 and 3.1.0, Cross-Site Scripting vulnerability in G | |
CVE-2026-42338 |
medium | 5.3 | 0.0047 | 2026-05-12 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to | |
CVE-2026-21730 |
medium | 5.3 | 0.0021 | 2026-05-14 | Verba is affected by a Stored Cross-Site Scripting (XSS) vulnerability within its login logging mech | |
CVE-2026-41932 |
medium | 5.3 | 0.0022 | 2026-05-14 | Vvveb before 1.0.8.3 contains a stored cross-site scripting vulnerability in the customer signup flo | |
CVE-2026-44371 |
medium | 5.3 | 0.0026 | 2026-05-14 | Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2 | |
CVE-2026-42159 |
medium | 5.3 | 0.0019 | 2026-05-14 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, tr | |
CVE-2026-45622 |
medium | 5.3 | 0.0032 | 2026-05-15 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stor |