XSS

XSS stands for Cross-Site Scripting, which is a type of web security vulnerability.

NewsSecurity Vulnerabilities

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability (CVE-2026-20232)

– A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.

Read More
NewsSecurity Vulnerabilities

WordPress Gallery PhotoBlocks Plugin Cross Site Scripting vulnerability (CVE-2026-66448)

– This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

Read More
NewsSecurity Vulnerabilities

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

– Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.

Read More
NewsSecurity Vulnerabilities

Cisco Webex Meetings Cross-Site Scripting Vulnerability (CVE-2025-20328)

CVE number = CVE-2025-20328 A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated,

Read More
NewsSecurity Vulnerabilities

Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability (CVE-2025-20208)

CVE-2025-20208 is a vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

Read More
NewsSecurity Vulnerabilities

Cisco BroadWorks Application Delivery Platform Cross-Site Scripting Vulnerability (CVE-2025-20211)

A vulnerability (CVE-2025-20211) in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface.

Read More
NewsSecurity Vulnerabilities

Palo Alto Networks PAN-OS – cross-site scripting (XSS) vulnerability [CVE-2024-5920]

CVE number – CVE-2024-5920 A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama

Read More
NewsSecurity Vulnerabilities

ChatGPT WordPress plugin – Cross-Site Scripting vulnerability [CVE-2024-6843]

CVE number = CVE-2024-6843 The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which

Read More
NewsSecurity Vulnerabilities

Trix Editor Cross-Site Scripting (XSS) vulnerability on copy & paste [CVE-2024-43368]

CVE number = CVE-2024-43368 CVSS Score = 6.5 The Trix editor, versions prior to 2.1.4, is vulnerable to XSS when

Read More
NewsSecurity Vulnerabilities

Multiple Vulnerabilities in HPE Aruba Networking EdgeConnect SD-WAN Orchestrator

HPE Aruba Networking has released patches for EdgeConnect SD-WAN Orchestrator that address multiple security vulnerabilities. Affected Products HPE Aruba Networking

Read More