Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,807 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-64902 |
medium | 4.6 | 0.0058 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-64916 |
medium | 4.6 | 0.0058 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-55016 |
medium | 4.6 | 0.0058 | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-55019 |
medium | 4.6 | 0.0058 | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-55020 |
medium | 4.6 | 0.0058 | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-55030 |
medium | 4.6 | 0.0058 | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-55135 |
medium | 4.6 | 0.0058 | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-62826 |
medium | 4.6 | 0.0058 | 2026-07-16 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-62829 |
medium | 4.6 | 0.0047 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-64922 |
medium | 4.6 | 0.0058 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-102859 |
medium | 4.6 | 0.0041 | 2026-10-13 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-102864 |
medium | 4.6 | 0.0041 | 2026-10-13 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-88208 |
medium | 4.6 | 0.0027 | 2026-10-13 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-88209 |
medium | 4.6 | 0.0036 | 2026-10-13 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-1493 |
medium | 4.6 | 0.0018 | 2026-04-30 | LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter. The application unsafel | |
CVE-2026-42086 |
medium | 4.6 | 0.0020 | 2026-05-04 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or mor | |
CVE-2026-46609 |
medium | 4.6 | 0.0014 | 2026-06-10 | Umbraco is an ASP.NET CMS. From version 14.0.0 to before version 17.4.0, authenticated users are abl | |
CVE-2026-45106 |
medium | 4.6 | 0.0021 | 2026-06-10 | Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview ren | |
CVE-2026-56381 |
medium | 4.6 | 0.0018 | 2026-06-21 | Craft CMS from version 5.0.0-RC1 contains a stored cross-site scripting vulnerability in the User Pe | |
CVE-2026-56383 |
medium | 4.6 | 0.0022 | 2026-06-21 | Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable.twig compo | |
CVE-2026-56393 |
medium | 4.6 | 0.0022 | 2026-06-21 | Craft CMS 4.x (>= 4.0.0-RC1, < 4.17.0-beta.1) and 5.x (>= 5.0.0-RC1, < 5.9.0-beta.1) contain multipl | |
CVE-2026-50698 |
medium | 4.6 | 0.0032 | 2026-06-24 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due | |
CVE-2026-50699 |
medium | 4.6 | 0.0040 | 2026-06-24 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev. An | |
CVE-2026-50700 |
medium | 4.6 | 0.0043 | 2026-06-24 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due | |
CVE-2026-50704 |
medium | 4.6 | 0.0032 | 2026-06-24 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due | |
CVE-2026-50705 |
medium | 4.6 | 0.0032 | 2026-06-24 | A Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to impr | |
CVE-2026-50710 |
medium | 4.6 | 0.0032 | 2026-06-24 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due | |
CVE-2026-50711 |
medium | 4.6 | 0.0032 | 2026-06-24 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due | |
CVE-2026-4770 |
medium | 4.6 | 0.0023 | 2026-07-02 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i | |
CVE-2026-1562 |
medium | 4.6 | 0.0024 | 2026-07-15 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vul | |
CVE-2026-14337 |
medium | 4.6 | 0.0042 | 2026-08-04 | Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vu | |
CVE-2026-73426 |
medium | 4.6 | 0.0032 | 2026-08-18 | Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix | |
CVE-2026-84915 |
medium | 4.6 | 0.0021 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-84919 |
medium | 4.6 | 0.0021 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-87942 |
medium | 4.6 | 0.0021 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-96357 |
medium | 4.6 | 0.0022 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-96358 |
medium | 4.6 | 0.0022 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-96359 |
medium | 4.6 | 0.0022 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-96361 |
medium | 4.6 | 0.0022 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-96368 |
medium | 4.6 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-96382 |
medium | 4.6 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-42887 |
medium | 4.5 | 0.0026 | 2026-05-11 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.33.0, a stored cross-site s | |
CVE-2026-109988 |
medium | 4.4 | 0.0021 | 2026-10-28 | The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vuln | |
CVE-2026-111068 |
medium | 4.4 | 0.0021 | 2026-10-28 | The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' | |
CVE-2026-0256 |
medium | 4.4 | 0.0016 | 2026-05-13 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a m | |
CVE-2026-47733 |
medium | 4.4 | 0.0014 | 2026-06-24 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, t | |
CVE-2026-75059 |
medium | 4.4 | 0.0018 | 2026-08-17 | In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible | |
CVE-2026-75526 |
medium | 4.4 | 0.0026 | 2026-08-20 | django CMS is an easy-to-use and developer-friendly enterprise content management system powered by | |
CVE-2024-35321 |
medium | 4.3 | 0.0031 | 2025-12-22 | MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulnerability vi | |
CVE-2026-70596 |
medium | 4.3 | 0.0032 | 2026-08-05 | Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue all |