Improper validation leads to a generic XSS vector in the language override feature.
CVE-2026-48954
Improper validation leads to a generic XSS vector in the language override feature.
#cwe-79
共收录 5879 条相关情报。
← 返回所有主题Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVE-2026-48952
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVE-2026-48951
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVE-2026-48950
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
Lack of validation leads to an XSS vulnerability in the MFA management views.
CVE-2026-48949
Lack of validation leads to an XSS vulnerability in the MFA management views.
DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stored component content with Vue v-html without server-side ...
CVE-2026-55647
DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stor
Dashy is a self-hostable personal dashboard. Prior to 4.3.7, Dashy's workspace view trusts the url query parameter and assigns it directly to an iframe source without scheme val...
CVE-2026-55592
Dashy is a self-hostable personal dashboard. Prior to 4.3.7, Dashy's workspace view trusts the url query parameter and a
Better Auth has stored XSS in the auth-server origin via javascript: redirect_uri in oidc-provider and mcp
### Am I affected? Check each condition. Users are affected when all of the first three hold. - Their application enab
Dashy: XSS in workspace url parameter
CVE-2026-55592
Dashy is a self-hostable personal dashboard. Prior to 4.3.7, Dashy's workspace view trusts the url query parameter and a
DataEase: authenticated stored XSS in the dashboard text components
CVE-2026-55647
DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stor
Improper validation leads to a generic XSS vector in the language override feature.
CVE-2026-48954
Improper validation leads to a generic XSS vector in the language override feature.
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
CVE-2026-48953
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVE-2026-48952
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVE-2026-48951
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVE-2026-48950
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
Lack of validation leads to an XSS vulnerability in the MFA management views.
CVE-2026-48949
Lack of validation leads to an XSS vulnerability in the MFA management views.
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a...
CVE-2025-12799
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined config
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedde...
CVE-2025-12799
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined config
Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
CVE-2026-26193
### Summary Manually modifying chat history allows setting the `embeds` property on a response message, the content of w
Open WebUI vulnerable to Stored XSS via iFrame in citations model
CVE-2026-26192
### Summary Manually modifying chat history allows setting the `html` property within document metadata. This causes the