Total
47492 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-27093 | 1 My-blog Project | 1 My-blog | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability found in My-Blog allows attackers to cause a denial of service via the Post function. | |||||
| CVE-2023-27092 | 1 Jbootfly Project | 1 Jbootfly | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter. | |||||
| CVE-2023-27090 | 1 Teacms Project | 1 Teacms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter. | |||||
| CVE-2023-27089 | 1 Ehuacui-bbs Project | 1 Ehuacui-bbs | 2026-06-17 | N/A | 8.2 HIGH |
| Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter. | |||||
| CVE-2023-27082 | 1 Pluck-cms | 1 Pluck | 2026-06-17 | N/A | 4.8 MEDIUM |
| Cross Site Scripting (XSS) vulnerability in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev4 allows remote attackers to run arbitrary code via upload of crafted html file. | |||||
| CVE-2023-27075 | 1 Microbin | 1 Microbin | 2026-06-17 | N/A | 5.4 MEDIUM |
| A cross-site scripting vulnerability (XSS) in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | |||||
| CVE-2023-27070 | 1 Totaljs | 1 Openplatform | 2026-06-17 | N/A | 5.4 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field. | |||||
| CVE-2023-27069 | 1 Totaljs | 1 Openplatform | 2026-06-17 | N/A | 5.4 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field. | |||||
| CVE-2023-27059 | 1 Churchcrm | 1 Churchcrm | 2026-06-17 | N/A | 5.4 MEDIUM |
| A cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Group Name text field. | |||||
| CVE-2023-27054 | 1 Mirotalk | 1 Mirotalk P2p | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module. | |||||
| CVE-2023-27008 | 1 Atutor | 1 Atutor | 2026-06-17 | N/A | 6.1 MEDIUM |
| A Cross-site scripting (XSS) vulnerability in the function encrypt_password() in login.tmpl.php in ATutor 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter. | |||||
| CVE-2023-26982 | 1 Trudesk Project | 1 Trudesk | 2026-06-17 | N/A | 5.4 MEDIUM |
| Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticket function. | |||||
| CVE-2023-26958 | 1 Phpgurukul | 1 Park Ticketing Management System | 2026-06-17 | N/A | 4.8 MEDIUM |
| Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Admin Name parameter. | |||||
| CVE-2023-26955 | 1 Onekeyadmin Project | 1 Onekeyadmin | 2026-06-17 | N/A | 5.4 MEDIUM |
| onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module. | |||||
| CVE-2023-26954 | 1 Onekeyadmin Project | 1 Onekeyadmin | 2026-06-17 | N/A | 5.4 MEDIUM |
| onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module. | |||||
| CVE-2023-26953 | 1 Onekeyadmin | 1 Onekeyadmin | 2026-06-17 | N/A | 4.8 MEDIUM |
| onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module. | |||||
| CVE-2023-26952 | 1 Onekeyadmin | 1 Onekeyadmin | 2026-06-17 | N/A | 5.4 MEDIUM |
| onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module. | |||||
| CVE-2023-26951 | 1 Onekeyadmin | 1 Onekeyadmin | 2026-06-17 | N/A | 5.4 MEDIUM |
| onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module. | |||||
| CVE-2023-26950 | 1 Onekeyadmin | 1 Onekeyadmin | 2026-06-17 | N/A | 5.4 MEDIUM |
| onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module. | |||||
| CVE-2023-26913 | 1 Evolucare | 1 Ecs Imaging | 2026-06-17 | N/A | 6.1 MEDIUM |
| EVOLUCARE ECSIMAGING (aka ECS Imaging) < 6.21.5 is vulnerable to Cross Site Scripting (XSS) via new_movie. php. | |||||