Threat database

CVE-2026-104396 is a stored cross-site scripting (XSS) vulnerability in Jeroen Peters Name Directory affecting versions from initial through 1.34.2. It allows improper neutralization of input during web page generation, potentially leading to script injection. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity. No official patch or vendor advisory is provided in the input data. The vulnerability requires user interaction and low privileges to exploit, with impacts on confidentiality, integrity, and availability.

Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name Directory name-directory.This issue affects Name Directory: from n/a through <= 1.29.0.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters All-in-one Like Widget all-in-one-facebook-like-widget.This issue affects All-in-one Like Widget: from n/a through <= 2.2.7.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Navigation menu as Dropdown Widget navigation-menu-as-dropdown-widget.This issue affects Navigation menu as Dropdown Widget: from n/a through <= 1.3.4.