Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-39781Document Gallery · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39781 CVE-2026-39781 is a high-severity reflected cross-site scripting (XSS) vulnerability in Dan Rossiter Document Gallery up to version 5.1.1. It allows improper neutralization of input during web page generation, potentially enabling attackers to execute arbitrary scripts in a victim's browser. The vulnerability affects versions from 0 through 5.1.1. No official patch or remediation information is provided in the available data. EPSS 0.2%Vulnerability Dan Rossiter #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.3%	CVE-2026-57695Document Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Dan Rossiter… High7.1EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57695 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through <= 5.1.0. EPSS 0.3%Vulnerability Dan Rossiter #cwe-79	CVE Database V5	2026-07-13
Medium	6.5	EPSS 0.2%	CVE-2025-26538Prezi Embedder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Dan Rossiter… Medium6.5EPSS 0.2%2025-02-13CVE Database V5CVE-2025-26538 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Prezi Embedder prezi-embedder allows Stored XSS.This issue affects Prezi Embedder: from n/a through <= 2.1. EPSS 0.2%Vulnerability Dan Rossiter	CVE Database V5	2025-02-13

Showing 1–3 of 3 results