Threats Tagged 'xss'
View all threats tagged with 'xss'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'xss'
Click on any threat for detailed analysis and mitigation recommendations
F-RevoCRM vulnerable to cross-site scripting 0 F-RevoCRM, a product by Thinkingreed Inc., contains a cross-site scripting (XSS) vulnerability. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. No specific affected versions or detailed technical information are provided. There is no indication of known exploits in the wild or available patches at this time. Join the discussion | JVN Japan | 08/17/2026, 05:00:00 UTC Added: 08/17/2026, 05:01:49 UTC |
Reflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor 0 Multiple laser printers and multifunction printers (MFPs) that use Ricoh Web Image Monitor are affected by a reflected cross-site scripting (XSS) vulnerability. This vulnerability allows an attacker to inject malicious scripts that are reflected back to users, potentially leading to unauthorized actions in the context of the affected device's web interface. No specific affected versions or patches are currently identified. There is no evidence of active exploitation in the wild at this time. Join the discussion | JVN Japan | 07/09/2026, 06:00:00 UTC Added: 08/04/2026, 13:25:04 UTC |
Cybozu Garoon vulnerable to cross-site scripting 0 Cybozu Garoon provided by Cybozu, Inc contains a cross-site scripting vulnerability. Join the discussion | JVN Japan | 08/03/2026, 03:00:00 UTC Added: 08/04/2026, 13:25:00 UTC |
Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th) 0 ESAFENET&#;x26;#;39;s CDG showed up in our data before. The company focused on secure document management and data leakage prevention solutions. The "CDG" stands for "Content Data Guard", and the product appears to be mostly targeting the Chinese market [1]. Sadly, like so many security products, it suffers from basic security vulnerabilities like SQL Injection, XSS, and default passwords. We have seen scanning for ESAFENET CDG before, in particular after the cross-site scripting vulnerability was made public.
 Join the discussion | SANS ISC Handlers Diary | 07/26/2026, 15:26:14 UTC Added: 07/26/2026, 15:37:06 UTC |
Zimbra Update Patches Critical Vulnerabilities 0 Zimbra Collaboration Suite (ZCS) version 10.1.20 addresses multiple critical vulnerabilities including a command injection flaw in the SNMP monitoring component, several cross-site scripting (XSS) issues in the Classic Web Client, a mail forwarding restriction bypass, an access control vulnerability in the EWS extension, an authorization issue in mailbox delegation, and a server-side request forgery (SSRF) bug in the Nextcloud integration. These flaws could allow unauthenticated or authenticated attackers to execute arbitrary OS commands, run malicious scripts, bypass mail forwarding restrictions, and perform unauthorized actions. Zimbra urges users to update to version 10.1.20 promptly. No exploitation in the wild has been reported at this time. Join the discussion | SecurityWeek | 07/21/2026, 08:20:08 UTC Added: 07/21/2026, 08:26:47 UTC |
Showing 1 to 5 of 5 results