Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,799 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-87948 |
low | 3.5 | 0.0022 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-96360 |
low | 3.5 | 0.0023 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-111737 |
low | 3.5 | 0.0019 | 2026-10-23 | The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings | |
CVE-2025-15705 |
low | 3.5 | 0.0014 | 2026-10-25 | The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form nam | |
CVE-2024-3586 |
low | 3.5 | 0.0016 | 2026-10-29 | The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, wh | |
CVE-2026-105258 |
low | 3.5 | 0.0017 | 2026-10-29 | The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form s | |
CVE-2026-48940 |
low | 3.4 | 0.0028 | 2026-06-25 | A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `emb | |
CVE-2026-41611 |
low | 3.3 | 0.0042 | 2026-05-12 | Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code | |
CVE-2026-87949 |
low | 3.3 | 0.0021 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-116687 |
low | 3.1 | 0.0025 | 2026-10-27 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7. | |
CVE-2026-27937 |
low | 3.1 | 0.0014 | 2026-04-21 | October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, a reflect | |
CVE-2026-84911 |
low | 3.1 | 0.0019 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-45028 |
low | 2.9 | 0.0014 | 2026-05-13 | Astro is a web framework. Astro versions prior to 6.1.10 used AES-GCM encryption to protect the conf | |
CVE-2026-52838 |
low | 2.6 | 0.0022 | 2026-07-14 | Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrato | |
CVE-2026-54326 |
low | 2.5 | 0.0017 | 2026-06-23 | Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi HTML exports render session Ma | |
CVE-2026-4313 |
low | 2.4 | 0.0059 | 2026-04-24 | AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms. Authenticated attacke | |
CVE-2026-114061 |
low | 2.3 | 0.0021 | 2026-10-21 | SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered | |
CVE-2026-114130 |
low | 2.3 | 0.0041 | 2026-10-21 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for C | |
CVE-2026-57196 |
low | 2.3 | 0.0077 | 2026-10-26 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-42794 |
low | 2.3 | 0.0028 | 2026-05-08 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql | |
CVE-2026-34089 |
low | 2.3 | 0.0035 | 2026-05-11 | Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45.0 before 1 | |
CVE-2026-53427 |
low | 2.3 | 0.0069 | 2026-06-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-49210 |
low | 2.3 | 0.0034 | 2026-07-17 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, Symfony\UX\Live | |
CVE-2026-66300 |
low | 2.3 | 0.0032 | 2026-08-04 | SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirec | |
CVE-2026-73157 |
low | 2.3 | 0.0044 | 2026-08-11 | Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-b | |
CVE-2026-73492 |
low | 2.3 | 0.0039 | 2026-08-12 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, buil | |
CVE-2026-114127 |
low | 2.3 | 0.0039 | 2026-10-21 | Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side Vi | |
CVE-2026-115754 |
low | 2.3 | 0.0023 | 2026-10-23 | serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allo | |
CVE-2026-116538 |
low | 2.3 | 0.0029 | 2026-10-26 | HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scrip | |
CVE-2026-116514 |
low | 2.1 | 0.0035 | 2026-10-26 | A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unkno | |
CVE-2026-117533 |
low | 2.1 | 0.0013 | 2026-10-27 | REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_me | |
CVE-2026-117537 |
low | 2.1 | 0.0018 | 2026-10-27 | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticat | |
CVE-2026-117538 |
low | 2.1 | 0.0018 | 2026-10-27 | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages | |
CVE-2026-118256 |
low | 2.1 | 0.0048 | 2026-10-28 | Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-a | |
CVE-2026-0586 |
low | 2.1 | 0.0037 | 2026-01-05 | A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected el | |
CVE-2026-5255 |
low | 2.1 | 0.0027 | 2026-04-01 | A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown par | |
CVE-2026-5319 |
low | 2.1 | 0.0034 | 2026-04-02 | A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affe | |
CVE-2026-6032 |
low | 2.1 | 0.0036 | 2026-04-10 | A vulnerability was found in code-projects Simple Laundry System 1.0. This impacts an unknown functi | |
CVE-2026-6034 |
low | 2.1 | 0.0034 | 2026-04-10 | A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknow | |
CVE-2026-6035 |
low | 2.1 | 0.0034 | 2026-04-10 | A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected | |
CVE-2026-6150 |
low | 2.1 | 0.0026 | 2026-04-13 | A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown p | |
CVE-2026-6159 |
low | 2.1 | 0.0027 | 2026-04-13 | A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerabi | |
CVE-2026-40878 |
low | 2.1 | 0.0080 | 2026-04-21 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 20 | |
CVE-2026-7089 |
low | 2.1 | 0.0038 | 2026-04-27 | A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted el | |
CVE-2026-7095 |
low | 2.1 | 0.0027 | 2026-04-27 | A vulnerability was identified in code-projects Employee Management System 1.0. This affects an unkn | |
CVE-2026-7116 |
low | 2.1 | 0.0027 | 2026-04-27 | A security flaw has been discovered in code-projects Employee Management System 1.0. This issue affe | |
CVE-2026-7129 |
low | 2.1 | 0.0026 | 2026-04-27 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is | |
CVE-2026-7230 |
low | 2.1 | 0.0026 | 2026-04-28 | A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is an unknown | |
CVE-2026-7401 |
low | 2.1 | 0.0032 | 2026-04-29 | A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analy | |
CVE-2026-7429 |
low | 2.1 | 0.0020 | 2026-04-30 | SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint |