Stored XSS in AIL Framework (CVE-2026-100176)
– A new Stored Cross-Site Scripting (XSS) vulnerability, CVE-2026-100176, has been disclosed in the AIL Framework. The flaw resides within the platform’s username timeline feature.
Read MoreXSS
XSS stands for Cross-Site Scripting, which is a type of web security vulnerability.
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability (CVE-2026-20232)
– A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
Read More
WordPress Gallery PhotoBlocks Plugin Cross Site Scripting vulnerability (CVE-2026-66448)
– This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.
Read More
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
– Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.
Read More
Cisco Webex Meetings Cross-Site Scripting Vulnerability (CVE-2025-20328)
CVE number = CVE-2025-20328 A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated,
Read MoreCisco TelePresence Management Suite Cross-Site Scripting Vulnerability (CVE-2025-20208)
CVE-2025-20208 is a vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
Read MoreCisco BroadWorks Application Delivery Platform Cross-Site Scripting Vulnerability (CVE-2025-20211)
A vulnerability (CVE-2025-20211) in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface.
Read More
Palo Alto Networks PAN-OS – cross-site scripting (XSS) vulnerability [CVE-2024-5920]
CVE number – CVE-2024-5920 A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama
Read More
ChatGPT WordPress plugin – Cross-Site Scripting vulnerability [CVE-2024-6843]
CVE number = CVE-2024-6843 The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which
Read MoreTrix Editor Cross-Site Scripting (XSS) vulnerability on copy & paste [CVE-2024-43368]
CVE number = CVE-2024-43368 CVSS Score = 6.5 The Trix editor, versions prior to 2.1.4, is vulnerable to XSS when
Read More