On this page
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Weakness Summary
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
- Canonical source: MITRE CWE-79 (opens in a new tab)
- Published Atomicorp CVE observations: 1452
- Distinct affected products in those observations: 1036
- Active Atomicorp rules associated with this weakness: 106
Atomicorp Research Context
Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.
The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.
A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.
Selected Published CVE Observations
| CVE | Vulnerability | Product | Atomicorp finding | Observed rules |
|---|---|---|---|---|
| CVE-2025-44136 | MapTiler Tileserver-php v2.0 - Unauthenticated XSS | tileserver php | Attack Blocked by Atomicorp | 341256 , 342259 , 346755 , 350148 |
| CVE-2025-44148 | MailEnable Mail Service < v10 - Cross-Site Scripting | mailenable | Attack Blocked by Atomicorp | 344363 , 346755 |
| CVE-2020-20982 | shadoweb wdja v1.5.1 - Cross-Site Scripting | wdja cms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-32853 | Erxes <0.23.0 - Cross-Site Scripting | erxes | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-1892 | Sidekiq < 7.0.8 - Cross-Site Scripting | sidekiq | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2023-45136 | XWiki < 14.10.14 - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 341266 |
| CVE-2026-54694 | NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover | skills-service | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-55085 | Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite | etherpad | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-66395 | SiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocol | siyuan | Attack Blocked by Atomicorp | 333140 , 340095 , 341266 |
| CVE-2026-73041 | SiYuan before v3.7.4 Remote Code Execution via PDF Annotations | siyuan | Attack Blocked by Atomicorp | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-73042 | SiYuan before v3.7.4 Remote Code Execution via Menu Metadata | siyuan | Attack Blocked by Atomicorp | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 390904 , 393655 |
| CVE-2026-73043 | SiYuan before v3.7.4 Remote Code Execution via Template Calculation | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-73044 | SiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-73050 | SiYuan before v3.7.4 Stored XSS via select option color | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-73052 | SiYuan before v3.7.4 Stored XSS via Attribute-View Field Names | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-73053 | SiYuan before v3.7.4 Cross-Site Scripting via unicode2Emoji | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-42849 | authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover | authentik | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-45668 | Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled) | Trilium | Attack Blocked by Atomicorp | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-57858 | Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking ID | Cal.com Self-Hosted (Cal.diy) | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-66394 | SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass | siyuan | Attack Blocked by Atomicorp | 300013 , 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-66396 | SiYuan before v3.7.2 Stored XSS to RCE via title-img IAL | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-66418 | OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field | openclaw agent dashboard | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-74902 | SiYuan before v3.7.4 XSS-to-RCE via malicious filename upload | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-78997 | UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) Cross-Site Scripting Vulnerability | UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-86738 | Snipe-IT before 8.7.0 CSS Injection via Custom CSS | snipe-it | Attack Blocked by Atomicorp | 333140 , 340095 , 342259 |
| CVE-2026-88866 | WWBN AVideo LoginControl Stored XSS via User-Agent Header | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-88867 | WWBN AVideo Stored XSS via Category Name and Icon Class | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-88868 | AVideo LiveLinks Stored XSS via title and description fields | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-88869 | AVideo AD_Server Stored XSS via log.php label parameter | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-89249 | AVideo YPTWallet Stored XSS via CryptoWallet Configuration | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-89253 | AVideo Stored XSS via donationLink in watch page button | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-89254 | AVideo CustomizeUser Stored XSS via field_name Parameter | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 341256 , 342259 , 346755 |
| CVE-2026-89255 | AVideo LoginControl Stored XSS via PGP Public Key | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-89256 | AVideo Bookmark Plugin Stored XSS via Chapter Names | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-84189 | LibreNMS before 26.7.0 Stored XSS via Oxidized API | librenms | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-89243 | WWBN AVideo Stored XSS via UserGroups setGroup_name | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-4180 | The Events Calendar < 6.4.0.1 - Cross-site Scripting | the events calendar | Attack Blocked by Atomicorp | 346755 |
| CVE-2019-7671 | Prima Access Control 2.3.35 - 'HwName' Persistent Cross-Site Scripting | flexair | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390726 , 392647 |
| CVE-2023-34192 | Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting | collaboration | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34448 | SiYuan: Stored XSS in Attribute View gallery/kanban cover rendering allows arbitrary command execution in the desktop cl | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35198 | HeyForm vulnerable to stored XSS via form field titles | heyform | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 342259 , 350147 , 350148 |
| CVE-2026-42556 | Postiz stored XSS in public preview page | postiz | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-43984 | Tautulli has stored XSS in logFile via guest-controlled log_js_errors input | Tautulli | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-64638 | WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell) | WordPress | Attack Blocked by Atomicorp | 344370 |
| CVE-2018-15884 | RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin) | mp c4504ex firmware | Attack Blocked by Atomicorp | 350147 |
| CVE-2020-2036 | Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting | pan-os | Attack Blocked by Atomicorp | 347198 |
| CVE-2024-39024 | In Packetfence 13.2.0, the WebGui interface setting Arbitrary Code Execution Vulnerability | - | Attack Blocked by Atomicorp | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-12968 | Product Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG Upload | Product Addons and Product Options With Custom Fields | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-42455 | LinkWarden: Stored XSS via Client-Side Archive Upload (Unsanitized HTML served from same origin) | linkwarden | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-8071 | Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.79 - Unauthenticated Stored XSS via Comment Shortcode Bypass | Anti-Spam by CleanTalk. Spam protection | Attack Blocked by Atomicorp | 331702 , 333140 , 333141 , 344370 , 346755 |
| CVE-2026-12496 | Loytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA server | LIP-ME20xC | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-15217 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | gitlab | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-28445 | Typebot: Stored XSS via Rating Block Custom Icon Bypasses isUnsafe Sandbox in Builder Preview | typebot.io | Attack Blocked by Atomicorp | 333140 , 340095 , 340147 , 341256 , 342259 , 346755 |
| CVE-2026-41147 | NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class | nukeviet | Attack Blocked by Atomicorp | 333140 |
| CVE-2026-44667 | Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering | faction | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-44669 | Faction: Stored XSS in Assessment Attachment Filename Preview Rendering | faction | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-44729 | Twenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Content-Type/Content-Disposition Headers) | twenty | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-45115 | MyBB: Buddy/ignore list username XSS | mybb | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-45116 | MyBB: Profile field type confusion XSS | mybb | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-45270 | CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule | ci4ms | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-46518 | OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics | openemr | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-47665 | Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML | penpot | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-47743 | Shopper: Multiple data integrity and disclosure issues in admin Livewire components | shopper | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-48026 | lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML | lakeFS | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48527 | HaxCMS has a stored Cross-Site Scripting (XSS) bypass in saveNode endpoint | haxcms-nodejs | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-53758 | Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized | emlog | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-54347 | Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover | froxlor | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-70492 | Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages | open-webui | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 346755 |
| CVE-2025-66024 | XWiki Blog Application home page vulnerable to Stored XSS via Post Title | blog application | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-34463 | MantisBT has Stored HTML Injection/XSS via Clone Issue Form | mantisbt | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34605 | SiYuan Note - Cross-Site Scripting | siyuan | Attack Blocked by Atomicorp | 300013 |
| CVE-2026-49864 | wetty vulnerable to DOM XSS via file-download filename | wetty | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 344365 , 346755 , 350147 , 350148 |
| CVE-2026-59239 | Stored XSS in Prospero Flow CRM email body allows administrator account takeover | Prospero Flow CRM | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 |
| CVE-2026-67328 | @better-auth/sso before 1.6.21 Account Takeover via SSO | sso | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-84803 | SiYuan before v3.8.2 Stored XSS via incomplete asset blocklist | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 |
| CVE-2026-21618 | Cross-site scripting (XSS) in OAuth Device Authorization screen | hexpm | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-34932 | hoppscotch: Stored XSS via mock server responses on backend origin | hoppscotch | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-58113 | Teamcenter V2412 Cross-site Scripting Vulnerability | Teamcenter V2412 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-63361 | LimeSurvey Community Edition 7.0.5+260623 - Reflected XSS in HTML editor popup | LimeSurvey | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-64851 | Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers | grav-plugin-shortcode-core | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-65986 | CVAT has stored XSS via annotation guide assets | cvat | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 341256 , 342259 , 350147 , 350148 |
| CVE-2026-75933 | Jet Admin Stored XSS | Jet Admin | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 342259 |
| CVE-2026-15973 | LimeSurvey 7.0.5 - Stored XSS in Survey Menu Entries | LimeSurvey | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-5385 | GLPI 11.0.0 - Stored XSS in knowledge base | glpi | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-77072 | n8n before 1.123.69 Stored XSS via Form Completion Page | n8n | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-77850 | Stored XSS in AshAdmin relationship typeahead via unescaped label_field content | ash admin | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-85613 | OpenPanel Unauthenticated XSS via SVG Favicon Proxy | openpanel | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-87811 | SiYuan before v3.8.2 Stored XSS via notebook template paths | siyuan | Attack Blocked by Atomicorp | 333140 , 340087 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-87814 | SiYuan before v3.8.2 Stored XSS via Asset Preview | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-5420 | SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting | utnserver Pro | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34725 | dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration | dbgate | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-56670 | ComfyUI: Stored XSS via SVG file upload on the /view endpoint | ComfyUI | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-63135 | YOURLS: Stored XSS in referrer statistics chart via crafted Referer header | YOURLS | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-18147 | Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url | Red Hat Enterprise Linux 10 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-33437 | Stirling PDF: Stored XSS in Info Summary | Stirling-PDF | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-39344 | Reflected XSS the login page through the 'username' parameter | churchcrm | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48060 | Litestar: HTML Injection Through CSRF Token | litestar | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48081 | OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer | appointment-booking-software | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 342259 |
| CVE-2026-50758 | DayuanJiang next-ai-draw-io 0.4.13 Arbitrary Code Execution Vulnerability | DayuanJiang next-ai-draw-io 0.4.13 | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-65937 | WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI | whatsup gold | Attack Blocked by Atomicorp | 340147 , 340148 , 340149 |
| CVE-2024-43687 | Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting (XSS) | timeprovider 4100 firmware | Attack Blocked by Atomicorp | 392301 |
| CVE-2025-47783 | Label Studio < 1.18.0 - Reflected XSS | label studio | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 344370 , 346755 |
| CVE-2026-16969 | DFIR-IRIS Stored XSS in Assets | iris-web | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-18360 | DFIR-IRIS Stored XSS in Custom Attributes | iris-web | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-18361 | DFIR-IRIS Stored XSS in Datastore Upload | iris-web | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-12592 | SlimStat Analytics < 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header | SlimStat Analytics | Attack Blocked by Atomicorp | 333141 , 334168 , 340003 , 340099 , 340158 , 341099 , 342259 |
| CVE-2026-16573 | Bit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature Upload | Bit Form | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-44657 | MantisBT: Stored XSS in File Download | mantisbt | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-7460 | mailcow-dockerized 2026-03b - Stored XSS in Queue Manager via unescaped | mailcow-dockerized | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 346755 , 350147 , 350148 |
| CVE-2026-87812 | SiYuan before v3.8.2 Stored XSS via Bazaar iconURL | siyuan | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-14340 | Payara Server - Cross-Site Scripting | Payara Server | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2026-30819 | Combodo iTop: Reflected XSS in /pages/ajax.render.php dashboard_id parameter | iTop | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-6735 | XSS within PHP-FPM status endpoint | php | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-8203 | Concrete CMS 9.5.0 and below has Stored XSS on the height parameter | concrete cms | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-2219 | Unyson < 2.7.27 - Cross Site Scripting | unyson | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2026-13731 | WPBot <= 8.4.9 - Cross-Site Scripting | chatbot | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-16809 | LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering | LimeSurvey | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 346755 |
| CVE-2026-18430 | HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason | HumHub | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 346755 |
| CVE-2026-18756 | HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering | HumHub | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-19914 | Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter | Welcart e-Commerce | Attack Blocked by Atomicorp | 333140 , 340095 , 340147 , 341256 , 342259 , 346755 |
| CVE-2026-4267 | Query Monitor <= 3.20.3 - Reflected Cross-Site Scripting via Request URI | Query Monitor | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 |
| CVE-2022-35499 | In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-10152 | Simple Certain Time to Show Content - Cross-Site Scripting | simple certain time to show content | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-12638 | Bulk Me Now! Plugin <= 2.0 - Cross-Site Scripting | bulk me now! | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-12749 | WordPress Competition Form Plugin <= 2.0 - Cross-Site Scripting | competition form | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-12878 | Lazy Blocks <= 3.8.2 - Cross-Site Scripting | lazy blocks | Attack Blocked by Atomicorp | 340148 , 341266 , 346755 , 377360 |
| CVE-2024-13055 | Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting | dyn business panel | Attack Blocked by Atomicorp | 341266 , 377360 |
| CVE-2024-13094 | WP Triggers Lite - Cross-Site Scripting | wp triggers lite | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13330 | JustRows WordPress - Cross-Site Scripting | justrows free | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13352 | Legull WordPress - Cross-Site Scripting | legull | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2024-13569 | WordPress Front End Users - Reflected XSS | front end users | Attack Blocked by Atomicorp | 341266 , 377360 |
| CVE-2024-13624 | WordPress WPMovieLibrary Plugin <= 2.1.4.8 - Cross-Site Scripting | wpmovielibrary | Attack Blocked by Atomicorp | 341266 , 377360 |
| CVE-2024-13625 | Tube Video Ads Lite - Reflected XSS | tube video ads lite | Attack Blocked by Atomicorp | 341266 |
| CVE-2024-41357 | phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS) | phpipam | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2026-12970 | LearnPress < 4.4.1 - Reflected XSS via c_search | LearnPress | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-13725 | Dynamic Pricing With Discount Rules for WooCommerce < 5.0.0 - Reflected XSS via wdpAjax | Dynamic Pricing With Discount Rules for WooCommerce | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-14234 | WOLF - WordPress Posts Bulk Editor and Manager < 1.1.0 - Stored XSS via CSRF | WOLF | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-14239 | Tourmaster < 5.4.8 - Stored XSS via CSRF | tourmaster | Attack Blocked by Atomicorp | 333141 , 340087 , 340095 , 340099 , 340148 , 341099 , 341266 , 346755 |
| CVE-2026-14870 | Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id | Database for Contact Form 7, WPforms, Elementor forms | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 |
| CVE-2026-34598 | YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter" | yeswiki | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-49069 | WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS) | WPZOOM Portfolio | Attack Blocked by Atomicorp | 300026 |
| CVE-2026-6858 | Transbank Webpay < 1.14.0 - Unauthenticated Stored XSS | Transbank Webpay | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-84192 | LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data | librenms | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2026-9833 | Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-55746 | Cotonti stored XSS via PFS folder title | Cotonti | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-58411 | ChurchCRM has Reflected Cross-Site Scripting (XSS) via unsanitized request parameter names and values | CRM | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-80426 | FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description | fiftyone | Attack Blocked by Atomicorp | 333140 , 333141 |
| CVE-2024-55890 | D-Tale <= 3.16.0 - Pre-Auth RCE via Pandas Query Injection | dtale | Attack Blocked by Atomicorp | 344370 |
| CVE-2025-4388 | Liferay Portal - Cross-Site Scripting | digital experience platform | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2025-4576 | Liferay Portal & DXP - Cross-Site Scripting | digital experience platform | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-62613 | VDO.Ninja - DOM-Based Cross-Site Scripting | vdo.ninja | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2026-39838 | ProofreadPage improperly sanitizes multiline styles using Sanitizer::checkCSS | MediaWiki - ProofreadPage Extension | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-39936 | Stored XSS in Score due to usage of non-reserved data attributes | Mediawiki - Score Extension | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-40598 | MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page | mantisbt | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-44651 | SillyTavern: Reflected XSS vulnerability in the CORS proxy middleware | SillyTavern | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-59238 | Stored XSS in Pentestify via unsanitized finding images and report client logo | Pentestify | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-69092 | Admidio before 5.0.11 Reflected XSS via SSO/SAML Endpoint | admidio | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-73848 | Emlog: Stored XSS via Tag Name in Article Editor | emlog | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-86188 | AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-13605 | Photo Swipe <= 4.1.1.1 - Author+ Stored XSS via title Attribute | PhotoSwipe | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-14817 | Element Pack Elementor Addons < 8.7.13 - Contributor+ DOM-Based Stored XSS via uikit Data Attributes | Element Pack Addons for Elementor | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-14827 | Calendar < 1.3.18 - Contributor+ Stored XSS via event_link Parameter | Calendar | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 342259 |
| CVE-2026-14833 | Lightbox with PhotoSwipe < 5.9.0 - Author+ Stored XSS via data-lbwps-caption Attribute | Lightbox with PhotoSwipe | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-15047 | s2Member < 260805 - Contributor+ Stored XSS via Shortcode | s2Member | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16069 | Brizy - Page Builder < 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point | Brizy | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-16559 | YMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon Upload | YMC Filter | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-33741 | EspoCRM: Stored XSS via SVG attachment loading same-origin JavaScript | espocrm | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-39311 | Trilium Notes: Stored XSS Leads to Unauthorized Remote Code Execution (RCE) via Unsanitized SVG Attachments | Trilium | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340099 , 341099 , 342259 , 344363 |
| CVE-2026-67352 | luci-app-https-dns-proxy Stored XSS via resolver_url | luci | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-32430 | XWiki Platform - Cross-Site Scripting | xwiki-platform | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2025-61224 | DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting | dokuwiki | Attack Blocked by Atomicorp | 333141 , 344370 |
| CVE-2025-66472 | XWiki DeleteApplication - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-24128 | XWiki Platform Distribution Flavor Main - Cross-Site Scripting | xwiki-platform-distribution-flavor-main | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2026-48093 | Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed | code-embed | Attack Blocked by Atomicorp | 333140 |
| CVE-2026-55549 | Yamcs: Reflected XSS in the URL of the Authorize Endpoint | yamcs | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-78838 | AppNitro MachForm v30 Cross-Site Scripting Vulnerability | AppNitro MachForm v30 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-13418 | Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting | Responsive Pricing Table | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2025-15064 | Ultimate Member <= 2.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via DOM Gadgets | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-0737 | Shortcodes Ultimate <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'su_lightbox' Shortcode | WP Shortcodes Plugin — Shortcodes Ultimate | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-0738 | Shortcodes Ultimate <= 7.4.8 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' Shortcode | WP Shortcodes Plugin — Shortcodes Ultimate | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 346755 |
| CVE-2026-31807 | SiYuan <= v3.5.9 - SVG Animate Element XSS | siyuan | Attack Blocked by Atomicorp | 300013 |
| CVE-2026-31809 | SiYuan <= v3.5.9 - Cross Site Scripting | siyuan | Attack Blocked by Atomicorp | 300013 |
| CVE-2026-36214 | osTicket Cross-Site Scripting Vulnerability | osTicket | Attack Blocked by Atomicorp | 333140 , 342259 |
| CVE-2026-3885 | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_bo | Shortcodes Ultimate – Content Elements | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-45797 | HeyForm Vulnerable to Stored XSS via Unauthenticated SVG File Upload | heyform | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-50592 | Znuny Cross-Site Scripting Vulnerability | Znuny | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-87870 | Ninja Forms - Scheduled Exports <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API Paramete | Ninja Forms - Scheduled Exports | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-43980 | Malla: Stored XSS via Meshtastic node names in multiple frontend pages | malla | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2011-4336 | Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting | tikiwiki cms/groupware | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2012-1260 | Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities | scrutinizer netflow & sflow analyzer | Attack Blocked by Atomicorp | 340003 , 340147 , 340148 , 340156 , 341245 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 , 390727 , 392301 , 392648 |
| CVE-2012-1261 | Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities | scrutinizer netflow & sflow analyzer | Attack Blocked by Atomicorp | 340003 , 340147 , 340148 , 340156 , 341245 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 , 390727 , 392301 , 392648 |
| CVE-2012-5193 | Bitweaver 2.8.1 - Multiple Vulnerabilities | bitweaver | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 380026 |
| CVE-2013-2679 | Cisco Linksys E4200 - Multiple Vulnerabilities | linksys e4200 firmware | Attack Blocked by Atomicorp | 392301 |
| CVE-2013-2684 | Cisco Linksys E4200 - Multiple Vulnerabilities | linksys e4200 firmware | Attack Blocked by Atomicorp | 392301 |
| CVE-2014-4535 | Import Legacy Media <= 0.1 - Cross-Site Scripting | import legacy media | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2014-4536 | Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting | infusionsoft gravity forms | Attack Blocked by Atomicorp | 333140 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2014-4539 | Movies <= 0.6 - Cross-Site Scripting | movies | Attack Blocked by Atomicorp | 333140 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2014-4544 | Podcast Channels < 0.28 - Cross-Site Scripting | podcast channels | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2014-4550 | Shortcode Ninja <= 1.4 - Cross-Site Scripting | ninja | Attack Blocked by Atomicorp | 340147 , 341266 |
| CVE-2014-4558 | WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting | swipehq-payment-gateway-woocommerce | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 344370 , 346755 , 350147 , 350148 |
| CVE-2014-4561 | Ultimate Weather Plugin <= 1.0 - Cross-Site Scripting | ultimate-weather | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2014-4592 | WP Planet <= 0.1 - Cross-Site Scripting | wp-planet | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2014-9606 | Netsweeper 4.0.8 - Cross-Site Scripting | netsweeper | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2014-9607 | Netsweeper 4.0.4 - Cross-Site Scripting | netsweeper | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2014-9608 | Netsweeper 4.0.3 - Cross-Site Scripting | netsweeper | Attack Blocked by Atomicorp | 341266 |
| CVE-2014-9615 | Netsweeper 4.0.4 - Cross-Site Scripting | netsweeper | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2015-6477 | Nordex NC2 - Cross-Site Scripting | nordex control 2 scada | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2015-6544 | Combodo iTop <2.2.0-2459 - Cross-Site Scripting | itop | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 390703 |
| CVE-2015-8349 | SourceBans <2.0 - Cross-Site Scripting | sourcebans | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2015-8350 | WordPress Calls to Action <=2.4.3 - Authenticated Reflected XSS | call to action | Attack Blocked by Atomicorp | 340148 , 341266 , 346755 , 377360 |
| CVE-2015-9312 | NewStatPress <=1.0.4 - Cross-Site Scripting | newstatpress | Attack Blocked by Atomicorp | 340099 , 341099 , 346755 , 347198 |
| CVE-2015-9414 | WordPress Symposium <=15.8.1 - Cross-Site Scripting | wp-symposium | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000126 | WordPress Admin Font Editor <=1.8 - Cross-Site Scripting | admin-font-editor | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000127 | WordPress AJAX Random Post <=2.00 - Cross-Site Scripting | ajax-random-post | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000128 | WordPress anti-plagiarism <=3.60 - Cross-Site Scripting | anti-plagiarism | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000129 | WordPress defa-online-image-protector <=3.3 - Cross-Site Scripting | defa-online-image-protector | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000130 | WordPress e-search <=1.0 - Cross-Site Scripting | e-search | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000131 | WordPress e-search <=1.0 - Cross-Site Scripting | esearch | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2016-1000132 | WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting | tooltip glossary | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000133 | WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting | forget about shortcode buttons | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000134 | WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting | hdw-tube | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000135 | WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting | hdw-tube | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000136 | WordPress heat-trackr 1.0 - Cross-Site Scripting | heat-trackr | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000137 | WordPress Hero Maps Pro 2.1.0 - Cross-Site Scripting | hero-maps-pro | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000138 | WordPress Admin Font Editor <=1.8 - Cross-Site Scripting | indexisto | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000139 | WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting | infusionsoft | Attack Blocked by Atomicorp | 340147 , 341256 , 341266 , 342259 |
| CVE-2016-1000140 | WordPress New Year Firework <=1.1.9 - Cross-Site Scripting | new-year-firework | Attack Blocked by Atomicorp | 340147 , 341266 |
| CVE-2016-1000141 | WordPress Page Layout builder v1.9.3 - Cross-Site Scripting | page-layout-builder | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2016-1000142 | WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting | parsi-font | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000143 | WordPress Photoxhibit 2.1.8 - Cross-Site Scripting | photoxhibit | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000146 | WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting | pondol-formmail | Attack Blocked by Atomicorp | 322100 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000148 | WordPress S3 Video <=0.983 - Cross-Site Scripting | s3-video | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2016-1000149 | WordPress Simpel Reserveren <=3.5.2 - Cross-Site Scripting | simpel-reserveren | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2016-1000152 | WordPress Tidio-form <=1.0 - Cross-Site Scripting | tidio-form | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2016-1000153 | WordPress Tidio Gallery <=1.1 - Cross-Site Scripting | tidio-gallery | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000154 | WordPress WHIZZ <=1.0.7 - Cross-Site Scripting | whizz | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-1000155 | WordPress WPSOLR <=8.6 - Cross-Site Scripting | wpsolr-search-engine | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2016-10973 | Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting | brafton | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2016-10976 | Safe Editor Plugin < 1.2 - CSS/JS-injection | safe editor | Attack Blocked by Atomicorp | 346755 |
| CVE-2016-15041 | MainWP Dashboard <= 3.1.2 - Stored Cross-Site Scripting | mainwp dashboard | Attack Blocked by Atomicorp | 333141 , 340149 , 346755 |
| CVE-2016-7981 | SPIP <3.1.2 - Cross-Site Scripting | spip | Attack Blocked by Atomicorp | 341256 , 341266 , 346755 |
| CVE-2016-8527 | Aruba AirWave 8.2.3 - XML External Entity Injection / Cross-Site Scripting | airwave | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 341266 , 342259 , 344370 , 346755 , 350147 , 350148 |
| CVE-2017-11107 | phpLDAPadmin <= 1.2.3 - Reflected XSS | phpldapadmin | Attack Blocked by Atomicorp | 340147 , 341256 , 341266 , 342259 , 350148 |
| CVE-2017-11629 | FineCMS <=5.0.10 - Cross-Site Scripting | finecms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2017-12583 | DokuWiki - Cross-Site Scripting | dokuwiki | Attack Blocked by Atomicorp | 333141 , 346755 , 347198 |
| CVE-2017-12794 | Django Debug Page - Cross-Site Scripting | django | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2017-14096 | Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control | smart protection server | Attack Blocked by Atomicorp | 330791 , 340007 , 340152 |
| CVE-2017-14622 | WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting | 2kb amazon affiliates store | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-15287 | Dreambox WebControl 2.0.0 - Cross-Site Scripting | bouqueteditor | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-15687 | Logitech Media Server - Cross-Site Scripting | media server | Attack Blocked by Atomicorp | 340099 , 341099 , 346755 , 347198 |
| CVE-2017-17043 | WordPress Emag Marketplace Connector 1.0 - Cross-Site Scripting | emag marketplace connector | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2017-17059 | WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting | amtythumb | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 , 392301 |
| CVE-2017-17451 | WordPress Mailster <=1.5.4 - Cross-Site Scripting | wp mailster | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 390585 |
| CVE-2017-18024 | AvantFAX 3.3.3 - Cross-Site Scripting | avantfax | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 , 350148 |
| CVE-2017-18487 | AdPush < 1.44 - Cross-Site Scripting | google adsense | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18490 | Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting | contact form multi | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18491 | Contact Form by BestWebSoft < 4.0.6 - Cross-Site Scripting | contact form | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18492 | Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting | contact form to db | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18493 | Custom Admin Page by BestWebSoft < 0.1.2 - Cross-Site Scripting | custom admin page | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18494 | Custom Search by BestWebSoft < 1.36 - Cross-Site Scripting | custom search | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18496 | Htaccess by BestWebSoft < 1.7.6 - Cross-Site Scripting | htaccess | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18500 | Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting | social buttons pack | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18501 | Social Login by BestWebSoft < 0.2 - Cross-Site Scripting | social login | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18502 | Subscriber by BestWebSoft < 1.3.5 - Cross-Site Scripting | subscriber | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18505 | BestWebSoft's Twitter < 2.55 - Cross-Site Scripting | twitter button | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18516 | LinkedIn by BestWebSoft < 1.0.5 - Cross-Site Scripting | Attack Blocked by Atomicorp | 341266 , 346755 | |
| CVE-2017-18517 | Pinterest by BestWebSoft < 1.0.5 - Cross-Site Scripting | Attack Blocked by Atomicorp | 341266 , 346755 | |
| CVE-2017-18518 | SMTP by BestWebSoft < 1.1.0 - Cross-Site Scripting | smtp | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18527 | Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting | pagination | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18528 | PDF & Print by BestWebSoft < 1.9.4 - Cross-Site Scripting | pdf & print | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18529 | PromoBar by BestWebSoft < 1.1.1 - Cross-Site Scripting | promobar | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18530 | Rating by BestWebSoft < 0.2 - Cross-Site Scripting | rating | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18532 | Realty by BestWebSoft < 1.1.0 - Cross-Site Scripting | realty | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18536 | WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting | stop user enumeration | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2017-18537 | Visitors Online by BestWebSoft < 1.0.0 - Cross-Site Scripting | visitors online | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18542 | Zendesk Help Center by BestWebSoft < 1.0.5 - Cross-Site Scripting | zendesk help center | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18556 | Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting | google analytics | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18557 | Google Maps by BestWebSoft < 1.3.6 - Cross-Site Scripting | google maps | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18558 | Testimonials by BestWebSoft < 0.1.9 - Cross-Site Scripting | testimonials | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18562 | Error Log Viewer by BestWebSoft < 1.0.6 - Cross-Site Scripting | error log viewer | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18564 | Sender by BestWebSoft < 1.2.1 - Cross-Site Scripting | sender | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18565 | Updater by BestWebSoft < 1.35 - Cross-Site Scripting | updater | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18566 | User Role by BestWebSoft < 1.5.6 - Cross-Site Scripting | user role | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-18590 | Timesheet Plugin < 0.1.5 - Cross-Site Scripting | timesheet | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2017-18598 | WordPress Qards - Cross-Site Scripting | qards | Attack Blocked by Atomicorp | 393749 |
| CVE-2017-3132 | Fortinet FortiOS < 5.6.0 - Cross-Site Scripting | fortios | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 344370 , 346755 , 347198 , 350147 , 350148 , 390727 , 392301 , 392648 |
| CVE-2017-3133 | Fortinet FortiOS < 5.6.0 - Cross-Site Scripting | fortios | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 344370 , 346755 , 347198 , 350147 , 350148 , 390727 , 392301 , 392648 |
| CVE-2017-5631 | KMCIS CaseAware - Cross-Site Scripting | caseaware | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 346755 , 350147 , 350148 , 360030 |
| CVE-2017-5798 | HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion | opencall media platform | Attack Blocked by Atomicorp | 390726 , 392301 , 392647 , 392648 |
| CVE-2017-6443 | EPSON TMNet WebConfig 1.00 - Cross-Site Scripting | tmnet webconfig | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2017-6478 | MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting | mangoswebv4 | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2017-7391 | Magmi 0.7.22 - Cross-Site Scripting | magmi | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2017-7855 | IceWarp WebMail 11.3.1.5 - Cross-Site Scripting | server | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2017-9072 | RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scripting | flatcalendarxp | Attack Blocked by Atomicorp | 392301 |
| CVE-2017-9140 | Reflected XSS - Telerik Reporting Module | telerik reporting | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 |
| CVE-2017-9288 | WordPress Raygun4WP <=1.8.0 - Cross-Site Scripting | raygun4wp | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2017-9813 | Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities | anti-virus for linux server | Attack Blocked by Atomicorp | 390704 , 390724 |
| CVE-2017-9979 | QuantaStor Software Defined Storage < 4.3.1 - Multiple Vulnerabilities | quantastor | Attack Blocked by Atomicorp | 330791 , 340152 , 392301 |
| CVE-2018-1000129 | Jolokia 1.3.7 - Cross-Site Scripting | jolokia | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2018-10095 | Dolibarr <7.0.2 - Cross-Site Scripting | dolibarr | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2018-10141 | Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting | pan-os | Attack Blocked by Atomicorp | 346755 |
| CVE-2018-10230 | Zend Server <9.13 - Cross-Site Scripting | zend server | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-10383 | Lantronix SecureLinx Spider (SLS) 2.2+ - Cross-Site Scripting | securelinx spider firmware | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-11133 | Quest KACE SMA /common/run_cross_report.php 'fmt' XSS | kace system management appliance | Attack Blocked by Atomicorp | 346755 |
| CVE-2018-11227 | Monstra CMS <=3.0.4 - Cross-Site Scripting | monstra cms | Attack Blocked by Atomicorp | 333141 , 340248 , 342259 , 346755 |
| CVE-2018-11709 | WordPress wpForo Forum <= 1.4.11 - Cross-Site Scripting | wpforo forum | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-12111 | Canon PrintMe EFI - Cross-Site Scripting | efi printme | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2018-12998 | Zoho manageengine - Cross-Site Scripting | firewall analyzer | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-13380 | Fortinet FortiOS - Cross-Site Scripting | fortios | Attack Blocked by Atomicorp | 333141 , 340147 , 341266 , 342259 , 347198 |
| CVE-2018-14013 | Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting | zimbra collaboration suite | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-16134 | Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting | cybrohttpserver | Attack Blocked by Atomicorp | 340147 , 341266 , 346755 |
| CVE-2018-16139 | BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting | bibliopac | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 |
| CVE-2018-16833 | ManageEngine Desktop Central 10.0.271 - Cross-Site Scripting | manageengine desktop central | Attack Blocked by Atomicorp | 333141 , 342259 , 350147 , 350148 |
| CVE-2018-17082 | Apache2 - Transfer-Encoding Chunked XSS | php | Attack Blocked by Atomicorp | 392301 |
| CVE-2018-17310 | RICOH MP C1803 JPN Printer - Cross-Site Scripting | mp c1803 jpn firmware | Attack Blocked by Atomicorp | 350147 |
| CVE-2018-17313 | RICOH MP C1803 JPN Printer - Cross-Site Scripting | mp c307 firmware | Attack Blocked by Atomicorp | 350147 |
| CVE-2018-17441 | D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities | central wifimanager | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2018-17443 | D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities | central wifimanager | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2018-17587 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | air 5750 firmware | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2018-17588 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | air 5021 firmware | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2018-17590 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | air 5442 firmware | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2018-17591 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | air 5343v2 firmware | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2018-17593 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | air 5453 firmware | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2018-18069 | WordPress sitepress-multilingual-cms 3.6.3 - Cross-Site Scripting | wpml | Attack Blocked by Atomicorp | 392301 |
| CVE-2018-18308 | BigTree CMS 4.2.23 - Cross-Site Scripting | bigtree cms | Detected by Atomicorp | 345493 |
| CVE-2018-18570 | Planon <Live Build 41 - Cross-Site Scripting | planon | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2018-18608 | DedeCMS 5.7 SP2 - Cross-Site Scripting | dedecms | Attack Blocked by Atomicorp | 340147 , 341266 , 346755 |
| CVE-2018-18775 | Microstrategy Web 7 - Cross-Site Scripting | microstrategy web | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2018-19136 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 346755 |
| CVE-2018-19137 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 346755 |
| CVE-2018-19287 | WordPress Ninja Forms <3.3.18 - Cross-Site Scripting | ninja forms | Attack Blocked by Atomicorp | 333141 , 340099 , 340148 , 341099 , 346755 , 347198 |
| CVE-2018-19439 | Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting | secure global desktop | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 390585 |
| CVE-2018-19877 | Adiscon LogAnalyzer <4.1.7 - Cross-Site Scripting | loganalyzer | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 360030 |
| CVE-2018-19933 | Bolt CMS < 3.6.2 - Cross-Site Scripting | bolt cms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2018-20367 | WSTMart 2.0.8 - Cross-Site Scripting | wstmart | Detected by Atomicorp | 345493 |
| CVE-2018-20462 | WordPress JSmol2WP <=1.07 - Cross-Site Scripting | jsmol2wp | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2018-20503 | SirsiDynix e-Library 3.5.x - Cross-Site Scripting | 8100l/8 firmware | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2018-20824 | Atlassian Jira WallboardServlet <7.13.1 - Cross-Site Scripting | jira | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2018-5230 | Atlassian Jira Confluence - Cross-Site Scripting | jira | Attack Blocked by Atomicorp | 340112 , 340147 , 346755 |
| CVE-2018-5233 | Grav CMS <1.3.0 - Cross-Site Scripting | grav cms | Attack Blocked by Atomicorp | 341266 |
| CVE-2018-5316 | WordPress SagePay Server Gateway for WooCommerce <1.0.9 - Cross-Site Scripting | sagepay server gateway for woocommerce | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2018-5715 | SugarCRM 3.5.1 - Cross-Site Scripting | sugarcrm | Attack Blocked by Atomicorp | 340147 , 340148 , 341245 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-6882 | zimbra collaboration suite Cross-Site Scripting Vulnerability | zimbra collaboration suite | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-7192 | osTicket < 1.10.2 - Cross-Site Scripting | osticket | Attack Blocked by Atomicorp | 344361 , 344364 , 346755 , 347198 |
| CVE-2018-7193 | osTicket < 1.10.2 - Cross-Site Scripting | osticket | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2018-7196 | osTicket < 1.10.2 - Cross-Site Scripting | osticket | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-7203 | TwonkyMedia Server 7.0.11-8.5 - Persistent Cross-Site Scripting | twonky server | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2018-7543 | WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting | duplicator | Attack Blocked by Atomicorp | 333140 , 340148 , 346755 , 380026 |
| CVE-2018-7653 | YzmCMS v3.6 - Cross-Site Scripting | yzmcms | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2018-8006 | Apache ActiveMQ <=5.15.5 - Cross-Site Scripting | activemq | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-9238 | Yahei PHP Prober 0.4.7 - Cross-Site Scripting | yahei php prober | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-0221 | Apache Tomcat - Cross-Site Scripting | tomcat | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350148 |
| CVE-2019-10092 | Apache HTTP Server <=2.4.39 - HTML Injection/Partial Cross-Site Scripting | http server | Attack Blocked by Atomicorp | 344365 |
| CVE-2019-1010287 | Timesheet Next Gen <=1.5.3 - Cross-Site Scripting | timesheet next gen | Attack Blocked by Atomicorp | 340147 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-10263 | Ahsay Backup 7.x - 8.1.1.50 - XML External Entity Injection | cloud backup suite | Attack Blocked by Atomicorp | 344372 |
| CVE-2019-10475 | Jenkins build-metrics 1.3 - Cross-Site Scripting | build-metrics | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2019-10685 | Prinect Archive System 2015 Release 2.6 - Cross-Site Scripting | prinect archiver | Attack Blocked by Atomicorp | 340147 , 341256 , 341266 , 346755 , 390585 |
| CVE-2019-11398 | UliCMS 2019.1 'Spitting Lama' - Persistent Cross-Site Scripting | ulicms | Attack Blocked by Atomicorp | 340247 , 340248 , 342259 , 344370 , 346755 |
| CVE-2019-11507 | Pulse Secure Pulse Connect Secure - Cross-Site Scripting (Reflected) | connect secure | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350148 , 390722 |
| CVE-2019-11844 | RICOH SP 4520DN Printer - HTML Injection | sp 4520dn firmware | Attack Blocked by Atomicorp | 350147 |
| CVE-2019-11845 | RICOH SP 4510DN Printer - HTML Injection | sp 4510dn firmware | Attack Blocked by Atomicorp | 350147 |
| CVE-2019-11846 | dotCMS 5.1.1 - HTML Injection | dotcms | Detected by Atomicorp | 345493 |
| CVE-2019-12461 | WebPort 1.19.1 - Cross-Site Scripting | web port | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-12581 | Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting | uag2100 | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2019-12935 | Shopware < 5.5.8 - Cross-Site Scripting | shopware | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2019-13392 | MindPalette NateMail 3.0.15 - Cross-Site Scripting | natemail | Attack Blocked by Atomicorp | 342259 , 350147 , 350148 |
| CVE-2019-14427 | Ultimate Loan Manager 2.0 - Cross-Site Scripting | ultimate loan manager | Attack Blocked by Atomicorp | 345493 , 390585 |
| CVE-2019-14470 | WordPress UserPro 4.9.32 - Cross-Site Scripting | instagram-php-api | Attack Blocked by Atomicorp | 333141 , 347198 |
| CVE-2019-14696 | Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting | open-school | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-14750 | osTicket < 1.12.1 - Cross-Site Scripting | osticket | Attack Blocked by Atomicorp | 346755 |
| CVE-2019-14789 | Custom 404 Pro < 3.2.8 - Cross-Site Scripting | custom 404 pro | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2019-14950 | WP Live Chat Support <= 8.0.27 — Stored Cross-Site Scripting | live chat | Attack Blocked by Atomicorp | 344370 , 346755 , 380026 |
| CVE-2019-14974 | SugarCRM Enterprise 9.0.0 - Cross-Site Scripting | sugarcrm | Attack Blocked by Atomicorp | 340112 , 346755 , 350148 |
| CVE-2019-15501 | L-Soft LISTSERV <16.5-2018a - Cross-Site Scripting | listserv | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-15713 | WordPress My Calendar <= 3.1.9 - Cross-Site Scripting | my calendar | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-15811 | DomainMOD <=4.13.0 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 |
| CVE-2019-15889 | WordPress Download Manager <2.9.94 - Cross-Site Scripting | wordpress download manager | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2019-16332 | WordPress API Bearer Auth <20190907 - Cross-Site Scripting | api bearer auth | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-16525 | WordPress Checklist <1.1.9 - Cross-Site Scripting | checklist | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-16931 | WordPress Visualizer <3.3.1 - Cross-Site Scripting | visualizer | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2019-17231 | WordPress OneTone theme <= 3.0.6 – Unauthenticated Stored XSS | onetone | Attack Blocked by Atomicorp | 346755 |
| CVE-2019-17504 | Kirona-DRS 5.5.3.5 - Information Disclosure | dynamic resource scheduling | Attack Blocked by Atomicorp | 312863 , 340147 , 340148 , 341266 , 342259 , 344370 , 346755 , 390716 |
| CVE-2019-18859 | Digi AnywhereUSB 14 - Reflective Cross-Site Scripting | anywhereusb/14 firmware | Attack Blocked by Atomicorp | 340147 , 341266 , 346755 , 390727 , 392301 , 392648 |
| CVE-2019-18957 | MicroStrategy Library <11.1.3 - Cross-Site Scripting | microstrategy library | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2019-19134 | WordPress Hero Maps Premium <=2.2.1 - Cross-Site Scripting | hero maps premium | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2019-19368 | Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting | rumpus | Attack Blocked by Atomicorp | 342259 , 350147 |
| CVE-2019-19908 | phpMyChat-Plus 1.98 - Cross-Site Scripting | phpmychat-plus | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-20141 | WordPress Laborator Neon Theme 2.0 - Cross-Site Scripting | neon | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 341099 , 342259 , 347198 , 350147 , 350148 |
| CVE-2019-20210 | WordPress CTHthemes - Cross-Site Scripting | citybook | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-3402 | Jira < 8.1.1 - Cross-Site Scripting | jira | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 , 390585 |
| CVE-2019-3911 | LabKey Server Community Edition <18.3.0 - Cross-Site Scripting | labkey server | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-6112 | WordPress Sell Media 2.4.1 - Cross-Site Scripting | sell media | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2019-6802 | Pypiserver <1.2.5 - Carriage Return Line Feed Injection | pypiserver | Attack Blocked by Atomicorp | 330708 , 390714 |
| CVE-2019-7219 | Zarafa WebApp <=2.0.1.47791 - Cross-Site Scripting | webaccess | Attack Blocked by Atomicorp | 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2019-7255 | Linear eMerge E3 - Cross-Site Scripting | linear emerge essential firmware | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2019-7438 | JioFi 4G M2S 1.0.2 - 'mask' Cross-Site Scripting | jiofi 4g m2s firmware | Attack Blocked by Atomicorp | 340149 , 341256 , 342259 , 344361 , 344364 , 344370 , 350147 |
| CVE-2019-8390 | qdPM 9.1 - 'search[keywords]' Cross-Site Scripting | qdpm | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 350147 |
| CVE-2019-8937 | HotelDruid 2.3.0 - Cross-Site Scripting | hoteldruid | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-9553 | Bolt CMS 3.6.4 - Cross-Site Scripting | bolt | Attack Blocked by Atomicorp | 340148 , 341256 , 346755 |
| CVE-2019-9591 | ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities | connect onsite | Attack Blocked by Atomicorp | 340003 , 340147 , 341266 , 342259 , 390585 , 390727 , 392301 , 392648 |
| CVE-2019-9592 | ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities | connect onsite | Attack Blocked by Atomicorp | 340003 , 340147 , 341266 , 342259 , 390585 , 390727 , 392301 , 392648 |
| CVE-2019-9593 | ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities | connect onsite | Attack Blocked by Atomicorp | 340003 , 340147 , 341266 , 342259 , 390585 , 390727 , 392301 , 392648 |
| CVE-2019-9912 | WP Google Maps < 7.10.43 - Cross-Site Scripting | wp go maps | Attack Blocked by Atomicorp | 340099 , 341099 , 346755 , 347198 |
| CVE-2019-9955 | Zyxel - Cross-Site Scripting | atp200 firmware | Attack Blocked by Atomicorp | 346755 |
| CVE-2020-1106 | Microsoft Office SharePoint XSS Vulnerability | sharepoint enterprise server | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-11930 | WordPress GTranslate <2.8.52 - Cross-Site Scripting | translate wordpress with gtranslate | Attack Blocked by Atomicorp | 340147 , 341266 , 346755 |
| CVE-2020-12054 | WordPress Catch Breadcrumb <1.5.4 - Cross-Site Scripting | catch breadcrumb | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2020-12707 | LeptonCMS 4.5.0 - Persistent Cross-Site Scripting | lepton cms | Detected by Atomicorp | 345493 |
| CVE-2020-13258 | Contentful <=2020-05-21 - Cross-Site Scripting | python example | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-13483 | Bitrix24 <=20.0.0 - Cross-Site Scripting | bitrix24 | Attack Blocked by Atomicorp | 344363 , 344370 , 346755 , 390722 |
| CVE-2020-13820 | Extreme Management Center 8.4.1.24 - Cross-Site Scripting | extreme management center | Attack Blocked by Atomicorp | 333141 , 340149 , 342259 , 346755 |
| CVE-2020-14408 | Agentejo Cockpit 0.10.2 - Cross-Site Scripting | cockpit | Attack Blocked by Atomicorp | 346755 |
| CVE-2020-14413 | NeDi 1.9C - Cross-Site Scripting | nedi | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2020-15500 | TileServer GL <=3.0.0 - Cross-Site Scripting | tileservergl | Attack Blocked by Atomicorp | 333141 , 341245 , 341256 , 342259 , 346755 , 350147 |
| CVE-2020-15599 | Victor CMS 1.0 - 'user_firstname' Persistent Cross-Site Scripting | victor cms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 345493 , 346755 , 350148 |
| CVE-2020-15718 | RosarioSIS 6.7.2 - Cross-Site Scripting | rosariosis | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2020-15895 | D-Link DIR-816L 2.x - Cross-Site Scripting | dir-816l firmware | Attack Blocked by Atomicorp | 346755 |
| CVE-2020-17362 | Nova Lite < 1.3.9 - Cross-Site Scripting | nova lite | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-19282 | Jeesns 1.4.2 - Cross-Site Scripting | jeesns | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2020-19283 | Jeesns 1.4.2 - Cross-Site Scripting | jeesns | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-19295 | Jeesns 1.4.2 - Cross-Site Scripting | jeesns | Attack Blocked by Atomicorp | 341266 |
| CVE-2020-1943 | Apache OFBiz <=16.11.07 - Cross-Site Scripting | ofbiz | Attack Blocked by Atomicorp | 347198 |
| CVE-2020-19515 | qdPM 9.1 - Cross-site Scripting | qdpm | Attack Blocked by Atomicorp | 340099 , 341099 , 346755 , 347198 |
| CVE-2020-2096 | Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting | gitlab hook | Attack Blocked by Atomicorp | 341266 |
| CVE-2020-23517 | Aryanic HighMail (High CMS) - Cross-Site Scripting | high cms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-23814 | XXL-JOB v2.2.0 — Stored Cross Site Scripting | xxl-job | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2020-24223 | Mara CMS 7.5 - Cross-Site Scripting | mara cms | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2020-24609 | Savsoft Quiz 5 - Stored Cross-Site Scripting | savsoft quiz | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2020-24701 | OX Appsuite - Cross-Site Scripting | open-xchange appsuite | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2020-24902 | Quixplorer <=2.4.1 - Cross-Site Scripting | quixplorer | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2020-24903 | Cute Editor for ASP.NET 6.4 - Cross-Site Scripting | cute editor | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2020-25495 | SCO Openserver 5.0.7 - 'section' Reflected XSS | openserver | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 390585 |
| CVE-2020-25864 | HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting | consul | Attack Blocked by Atomicorp | 392301 |
| CVE-2020-26153 | Event Espresso Core-Reg 4.10.7.p - Cross-Site Scripting | event espresso | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2020-27735 | Wing FTP 6.4.4 - Cross-Site Scripting | wing ftp server | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2020-27982 | IceWarp WebMail 11.4.5.0 - Cross-Site Scripting | mail server | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2020-28351 | Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting | shoretel | Attack Blocked by Atomicorp | 341266 |
| CVE-2020-29164 | PacsOne Server <7.1.1 - Cross-Site Scripting | pacsone server | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 341099 , 346755 , 360030 |
| CVE-2020-29395 | Wordpress EventON Calendar 3.0.5 - Cross-Site Scripting | eventon | Attack Blocked by Atomicorp | 333141 , 342259 , 347198 , 350148 |
| CVE-2020-35416 | PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting) | phpjabbers appointment scheduler | Attack Blocked by Atomicorp | 340003 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 , 390585 |
| CVE-2020-3580 | Cisco ASA/FTD Software - Cross-Site Scripting | firepower threat defense | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-36510 | WordPress 15Zine <3.3.0 - Cross-Site Scripting | 15zine | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2020-36731 | Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update | flexible checkout fields for woocommerce | Attack Blocked by Atomicorp | 346755 , 377360 , 390585 |
| CVE-2020-5191 | Hospital Management System 4.0 - Persistent Cross-Site Scripting | hospital management system | Attack Blocked by Atomicorp | 342259 , 345493 |
| CVE-2020-6171 | CLink Office 2.0 - Cross-Site Scripting | clink office | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-7107 | WordPress Ultimate FAQ <1.8.30 - Cross-Site Scripting | ultimate faq | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2020-8115 | Revive Adserver <=5.0.3 - Cross-Site Scripting | revive adserver | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2020-8191 | Citrix ADC/Gateway - Cross-Site Scripting | application delivery controller firmware | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2020-8512 | IceWarp WebMail Server <=11.4.4.1 - Cross-Site Scripting | icewarp server | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 |
| CVE-2020-8549 | WordPress Plugin Strong Testimonials 2.40.1 - Persistent Cross-Site Scripting | strong testimonials | Attack Blocked by Atomicorp | 345493 , 346755 |
| CVE-2020-9036 | Jeedom <=4.0.38 - Cross-Site Scripting | jeedom | Attack Blocked by Atomicorp | 346755 |
| CVE-2020-9344 | Jira Subversion ALM for Enterprise <8.8.2 - Cross-Site Scripting | subversion application lifecycle management | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-20137 | Gryphon Tower - Cross-Site Scripting | gryphon tower | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-20323 | Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting | keycloak | Attack Blocked by Atomicorp | 333141 , 341258 |
| CVE-2021-20792 | WordPress Quiz and Survey Master <7.1.14 - Cross-Site Scripting | quiz and survey master | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-21799 | Advantech R-SeeNet 2.4.12 - Cross-Site Scripting | r-seenet | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-21800 | Advantech R-SeeNet 2.4.12 - Cross-Site Scripting | r-seenet | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-21801 | Advantech R-SeeNet - Cross-Site Scripting | r-seenet | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-21802 | Advantech R-SeeNet - Cross-Site Scripting | r-seenet | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-21803 | Advantech R-SeeNet - Cross-Site Scripting | r-seenet | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-22122 | FortiWeb - Cross Site Scripting | fortiweb | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-24169 | WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting | advanced order export | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-24213 | GiveWP <= 2.9.7 - Cross-Site Scripting | givewp | Attack Blocked by Atomicorp | 340148 , 341266 , 346755 , 377360 |
| CVE-2021-24214 | WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting | openid connect generic client | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2021-24235 | WordPress Goto Tour & Travel Theme <2.0 - Cross-Site Scripting | goto | Attack Blocked by Atomicorp | 333141 , 340099 , 340149 , 341099 , 341256 , 342259 , 344370 , 346755 , 347198 , 350148 , 390722 |
| CVE-2021-24237 | WordPress Realteo <=1.2.3 - Cross-Site Scripting | findeo | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-24245 | WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS) | stop spammers | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 398005 |
| CVE-2021-24274 | WordPress Supsystic Ultimate Maps <1.2.5 - Cross-Site Scripting | ultimate maps | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-24275 | Popup by Supsystic <1.10.5 - Cross-Site scripting | popup | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-24276 | WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting | contact form | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-24286 | WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting | redirect 404 to parent | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2021-24287 | WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting | select all categories and taxonomies, change checkbox to radio buttons | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2021-24291 | WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting | photo gallery | Attack Blocked by Atomicorp | 347198 |
| CVE-2021-24298 | WordPress Simple Giveaways <2.36.2 - Cross-Site Scripting | simple giveaways | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-24300 | WordPress WooCommerce <1.13.22 - Cross-Site Scripting | product slider for woocommerce | Attack Blocked by Atomicorp | 333141 , 340149 , 346755 , 347198 |
| CVE-2021-24316 | WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting | mediumish | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-24320 | WordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site Scripting | bello | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-24335 | WordPress Car Repair Services & Auto Mechanic Theme <4.0 - Cross-Site Scripting | car repair services & auto mechanic | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-24342 | WordPress JNews Theme <8.0.6 - Cross-Site Scripting | jnews | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-24351 | WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting | the plus addons for elementor | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-24364 | WordPress Jannah Theme <5.4.4 - Cross-Site Scripting | jannah | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-24387 | WordPress Pro Real Estate 7 Theme <3.1.1 - Cross-Site Scripting | real estate 7 | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2021-24389 | WordPress FoodBakery <2.2 - Cross-Site Scripting | foodbakery | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-24407 | WordPress Jannah Theme <5.4.5 - Cross-Site Scripting | jannah | Attack Blocked by Atomicorp | 392301 |
| CVE-2021-24409 | Prismatic < 2.8 - Cross-Site Scripting | prismatic | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2021-24435 | WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting | titan framework | Attack Blocked by Atomicorp | 333141 , 340149 , 341245 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-24436 | WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting | w3 total cache | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-24452 | WordPress W3 Total Cache <2.1.5 - Cross-Site Scripting | w3 total cache | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2021-24488 | WordPress Post Grid <2.1.8 - Cross-Site Scripting | post grid | Attack Blocked by Atomicorp | 333141 , 340149 , 346755 , 347198 |
| CVE-2021-24495 | Wordpress Marmoset Viewer <1.9.3 - Cross-Site Scripting | marmoset viewer | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 340162 , 340163 , 341256 , 341266 , 342259 , 344370 , 346755 , 347198 , 350147 , 350148 |
| CVE-2021-24498 | WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting | calendar event multi view | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2021-24522 | ProfilePress < 3.1.11 - Cross-Site Scripting | profilepress | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2021-24563 | WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated) | frontend uploader | Attack Blocked by Atomicorp | 392301 |
| CVE-2021-24657 | Limit Login Attempts WordPress - Stored Cross-site Scripting | limit login attempts | Detected by Atomicorp | 377360 |
| CVE-2021-24875 | WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting | ecommerce product catalog | Attack Blocked by Atomicorp | 333141 , 346755 , 347198 |
| CVE-2021-24876 | Registrations for The Events Calendar < 2.7.5 - Authenticated Reflected Cross-Site Scripting | registrations for the events calendar | Attack Blocked by Atomicorp | 346755 , 347198 , 377360 |
| CVE-2021-24878 | SupportCandy < 2.2.7 - Reflected Cross-Site Scripting | supportcandy | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-24910 | WordPress Transposh Translation <1.0.8 - Cross-Site Scripting | transposh wordpress translation | Attack Blocked by Atomicorp | 340099 , 341099 , 347198 |
| CVE-2021-24926 | WordPress Domain Check <1.0.17 - Cross-Site Scripting | domain check | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-24934 | Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting | visual css style editor | Attack Blocked by Atomicorp | 341266 |
| CVE-2021-24940 | WordPress Persian Woocommerce <=5.8.0 - Cross-Site Scripting | persian-woocommerce | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2021-24956 | Blog2Social < 6.8.7 - Cross-Site Scripting | blog2social | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-24979 | Paid Memberships Pro < 2.6.6 - Cross-Site Scripting | paid memberships pro | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2021-24987 | WordPress Super Socializer <7.13.30 - Cross-Site Scripting | super socializer | Attack Blocked by Atomicorp | 340099 , 341099 , 346755 , 347198 |
| CVE-2021-25008 | The Code Snippets WordPress Plugin < 2.14.3 - Cross-Site Scripting | code snippets | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2021-25016 | Chaty < 2.8.2 - Cross-Site Scripting | chaty | Attack Blocked by Atomicorp | 341266 , 346755 , 347198 |
| CVE-2021-25055 | WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting | feedwordpress | Attack Blocked by Atomicorp | 340099 , 341099 , 346755 , 347198 |
| CVE-2021-25063 | WordPress Contact Form 7 Skins <=2.5.0 - Cross-Site Scripting | contact form 7 skins | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2021-25078 | Affiliates Manager < 2.9.0 - Cross Site Scripting | affiliates manager | Attack Blocked by Atomicorp | 347198 |
| CVE-2021-25079 | Contact Form Entries < 1.2.4 - Cross-Site Scripting | contact form entries | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-25085 | WOOF WordPress plugin - Cross-Site Scripting | woocommerce products filter | Attack Blocked by Atomicorp | 340099 , 341099 , 347198 |
| CVE-2021-25104 | WordPress Ocean Extra <1.9.5 - Cross-Site Scripting | ocean extra | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 346755 |
| CVE-2021-25112 | WordPress WHMCS Bridge <6.4b - Cross-Site Scripting | whmcs bridge | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2021-25120 | Easy Social Feed < 6.2.7 - Cross-Site Scripting | easy social feed | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-25161 | Aruba Instant Access Point (IAP) - Cross-Site Scripting | aruba-instant-access-point | Attack Blocked by Atomicorp | 344370 , 346755 , 390722 |
| CVE-2021-26247 | Cacti - Cross-Site Scripting | cacti | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-26475 | EPrints 3.4.2 - Cross-Site Scripting | eprints | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-26702 | EPrints 3.4.2 - Cross-Site Scripting | eprints | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2021-26710 | Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting | report2web | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-26723 | Jenzabar 9.2x-9.2.2 - Cross-Site Scripting | jenzabar | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 350147 , 350148 |
| CVE-2021-26812 | Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site Scripting | meet | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-26947 | Odoo <= 15.0 - Cross-Site Scripting | odoo | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 347198 |
| CVE-2021-27309 | Clansphere CMS 2011.4 - Cross-Site Scripting | clansphere | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-27310 | Clansphere CMS 2011.4 - Cross-Site Scripting | clansphere | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-27330 | Triconsole Datepicker Calendar <3.77 - Cross-Site Scripting | datepicker calendar | Attack Blocked by Atomicorp | 340147 , 341266 , 346755 |
| CVE-2021-27519 | FUDForum 3.1.0 - Cross-Site Scripting | fudforum | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-27520 | FUDForum 3.1.0 - Cross-Site Scripting | fudforum | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-27695 | openMAINT openMAINT 2.1-3.3-b - 'Multiple' Persistent Cross-Site Scripting | openmaint | Attack Blocked by Atomicorp | 330791 , 333141 , 340147 , 340148 , 340149 , 340152 , 341256 , 342259 , 346755 |
| CVE-2021-27909 | Mautic <3.3.4 - Cross-Site Scripting | mautic | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-29625 | Adminer <=4.8.0 - Cross-Site Scripting | adminer | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2021-3002 | Seo Panel 4.8.0 - Cross-Site Scripting | seo panel | Attack Blocked by Atomicorp | 333141 , 340147 , 346755 |
| CVE-2021-30049 | SysAid Technologies 20.3.64 b14 - Cross-Site Scripting | sysaid | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-30134 | Php-mod/curl Library <2.3.2 - Cross-Site Scripting | php curl class | Attack Blocked by Atomicorp | 333141 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-30151 | Sidekiq <=6.2.0 - Cross-Site Scripting | sidekiq | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-30203 | Dzzoffice 2.02.1 - Cross-Site Scripting | dzzoffice | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2021-30213 | Knowage Suite 7.3 - Cross-Site Scripting | knowage | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-31537 | SIS Informatik REWE GO SP17 <7.7 - Cross-Site Scripting | sis-rewe go | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2021-31589 | BeyondTrust Secure Remote Access Base <=6.0.1 - Cross-Site Scripting | appliance base software | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 |
| CVE-2021-31682 | WebCTRL OEM <= 6.5 - Cross-Site Scripting | webctrl | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-31862 | SysAid 20.4.74 - Cross-Site Scripting | sysaid | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2021-32478 | Moodle 3.8-3.10.3 - Reflected XSS & Open Redirect | moodle | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2021-33829 | Drupal 7 CKEditor XSS | ckeditor | Attack Blocked by Atomicorp | 333141 |
| CVE-2021-33904 | Accela Civic Platform 21.1 - 'servProvCode' Cross-Site-Scripting (XSS) | civic platform | Attack Blocked by Atomicorp | 341245 , 390727 , 392301 , 392648 |
| CVE-2021-34370 | Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS) | civic platform | Attack Blocked by Atomicorp | 341245 , 390727 , 392301 , 392648 |
| CVE-2021-34630 | GTranslate < 2.8.65 - Cross-Site Scripting | gtranslate | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-34640 | WordPress Securimage-WP-Fixed <=3.5.4 - Cross-Site Scripting | securimage-wp-fixed | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-34643 | WordPress Skaut Bazar <1.3.3 - Cross-Site Scripting | skaut-bazar | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-35265 | MaxSite CMS > V106 - Cross-Site Scripting | maxsite cms | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2021-35488 | Thruk 2.40-2 - Cross-Site Scripting | thruk | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2021-36450 | Verint Workforce Optimization 15.2.8.10048 - Cross-Site Scripting | workforce optimization | Attack Blocked by Atomicorp | 350147 |
| CVE-2021-36646 | KodExplorer - Cross-Site Scripting | kod-explorer | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-37416 | Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting | manageengine adselfservice plus | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 390585 |
| CVE-2021-37573 | Tiny Java Web Server - Cross-Site Scripting | tiny java web server | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2021-37833 | Hotel Druid 3.0.2 - Cross-Site Scripting | hoteldruid | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-3831 | Gnuboard 5 - Cross-Site Scripting | gnuboard5 | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2021-38702 | Cyberoam NetGenie Cross-Site Scripting | netgenie c0101b1-20141120-ng11vo firmware | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-38704 | ClinicCases 7.3.3 Cross-Site Scripting | cliniccases | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-39320 | WordPress Under Construction <1.19 - Cross-Site Scripting | underconstruction | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-39322 | WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting | easy social icons | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-39350 | FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting | fv flowplayer video player | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2021-39411 | Hospital Management System 1.0 - Cross-Site Scripting | hospital management system | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 |
| CVE-2021-40272 | IRTS OP5 Monitor - Cross-Site Scripting | monitor | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2021-40542 | Opensis-Classic 8.0 - Cross-Site Scripting | opensis | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2021-40868 | Cloudron 6.2 Cross-Site Scripting | cloudron | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-40968 | Spotweb <= 1.5.1 - Cross Site Scripting | spotweb | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-40969 | Spotweb <= 1.5.1 - Cross Site Scripting (Reflected) | spotweb | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-40970 | Spotweb <= 1.5.1 - Cross Site Scripting | spotweb | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-40971 | Spotweb <= 1.5.1 - Cross Site Scripting | spotweb | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-40972 | Spotweb <= 1.5.1 - Cross Site Scripting | spotweb | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-40973 | Spotweb <= 1.5.1 - Cross Site Scripting | spotweb | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-41174 | Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting | grafana | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-41467 | JustWriting - Cross-Site Scripting | justwriting | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-41878 | i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS) | i-panel administration system | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2021-41951 | Resourcespace - Cross-Site Scripting | resourcespace | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 , 390585 |
| CVE-2021-42063 | SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting | knowledge warehouse | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-42551 | NetBiblio WebOPAC - Cross-Site Scripting | netbiblio | Attack Blocked by Atomicorp | 341245 , 344370 , 346755 |
| CVE-2021-42565 | myfactory FMS - Cross-Site Scripting | fms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-42566 | myfactory FMS - Cross-Site Scripting | fms | Attack Blocked by Atomicorp | 346755 |
| CVE-2021-42567 | Apereo CAS Cross-Site Scripting | central authentication service | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 350148 |
| CVE-2021-43062 | Fortinet FortiMail 7.0.1 - Cross-Site Scripting | fortimail | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2021-43574 | Atmail 6.5.0 - Cross-Site Scripting | atmail | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2021-43725 | Spotweb <= 1.5.1 - Cross Site Scripting (Reflected) | spotweb | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2021-43810 | Admidio - Cross-Site Scripting | admidio | Attack Blocked by Atomicorp | 340112 , 350148 , 390722 |
| CVE-2021-45380 | AppCMS - Cross-Site Scripting | appcms | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 350147 , 350148 |
| CVE-2021-45422 | Reprise License Manager 14.2 - Cross-Site Scripting | reprise license manager | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-45425 | SAFARI Montage 8.5 - Reflected Cross Site Scripting (XSS) | safari montage | Attack Blocked by Atomicorp | 333140 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-46387 | Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS) | zywall 2 plus internet security appliance firmware | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 350147 |
| CVE-2022-0087 | Keystone 6 Login Page - Open Redirect and Cross-Site Scripting | keystone | Attack Blocked by Atomicorp | 333140 , 346755 , 350148 |
| CVE-2022-0147 | WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting | wp-gdpr-compliance | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2022-0149 | WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting | store exporter for woocommerce | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-0189 | WordPress RSS Aggregator < 4.20 - Authenticated Cross-Site Scripting | wp rss aggregator | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2022-0201 | WordPress Permalink Manager <2.2.15 - Cross-Site Scripting | permalink manager lite | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 |
| CVE-2022-0206 | WordPress NewStatPress <1.3.6 - Cross-Site Scripting | newstatpress | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2022-0208 | WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting | mappress | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2022-0212 | WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting | spidercalendar | Attack Blocked by Atomicorp | 341266 , 346755 , 347198 |
| CVE-2022-0234 | WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting | woocs | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2022-0250 | Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting | redirection for contact form 7 | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-0271 | LearnPress <4.1.6 - Cross-Site Scripting | learnpress | Attack Blocked by Atomicorp | 340099 , 341099 , 346755 , 347198 |
| CVE-2022-0346 | WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution | xml sitemap generator | Attack Blocked by Atomicorp | 333141 , 340165 , 341256 , 342259 , 344370 , 346755 , 347198 , 350148 |
| CVE-2022-0381 | WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting | embed swagger | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2022-0429 | WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Cross-Site Scripting | wp cerber security, anti-spam & malware scan | Attack Blocked by Atomicorp | 347198 |
| CVE-2022-0437 | karma-runner DOM-based Cross-Site Scripting | karma | Attack Blocked by Atomicorp | 340112 , 346755 , 350148 |
| CVE-2022-0533 | Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting | ditty | Attack Blocked by Atomicorp | 333141 , 346755 , 347198 |
| CVE-2022-0599 | WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting | mapping multiple urls redirect same page | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2022-0653 | Wordpress Profile Builder Plugin Cross-Site Scripting | profile builder | Attack Blocked by Atomicorp | 340112 |
| CVE-2022-0678 | Microweber <1.2.11 - Cross-Site Scripting | microweber | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-0864 | UpdraftPlus < 1.22.9 - Cross-Site Scripting | updraftplus | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-0879 | Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting | caldera forms | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 344361 , 344364 , 346755 , 347198 , 350148 |
| CVE-2022-0899 | Header Footer Code Manager < 1.1.24 - Cross-Site Scripting | header footer code manager | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-1007 | WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting | advanced booking calendar | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-1168 | WordPress WP JobSearch <1.5.1 - Cross-Site Scripting | jobsearch wp job board | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 |
| CVE-2022-1170 | JobMonster < 4.5.2.9 - Cross-Site Scripting | jobmonster | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2022-1221 | WordPress Gwyn's Imagemap Selector <=0.3.3 - Cross-Site Scripting | gwyn's imagemap selector | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-1439 | Microweber <1.2.15 - Cross-Site Scripting | microweber | Attack Blocked by Atomicorp | 346755 , 347198 , 350148 |
| CVE-2022-1597 | WordPress WPQA <5.4 - Cross-Site Scripting | wpqa builder | Attack Blocked by Atomicorp | 346755 |
| CVE-2022-1724 | WordPress Simple Membership <4.1.1 - Cross-Site Scripting | simple membership | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-1756 | Newsletter < 7.4.5 - Cross-Site Scripting | newsletter | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2022-1904 | WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting | easy pricing tables | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-1906 | WordPress Copyright Proof <=4.16 - Cross-Site-Scripting | copyright proof | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-1910 | WordPress Shortcodes and Extra Features for Phlox <2.9.8 - Cross-Site Scripting | shortcodes and extra features for phlox theme | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-1916 | WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting | woot | Attack Blocked by Atomicorp | 346755 |
| CVE-2022-1933 | WordPress CDI <5.1.9 - Cross Site Scripting | collect and deliver interface for woocommerce | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-1937 | WordPress Awin Data Feed <=1.6 - Cross-Site Scripting | awin data feed | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-1946 | WordPress Gallery <2.0.0 - Cross-Site Scripting | gallery | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-2130 | Microweber < 1.2.17 - Cross-Site Scripting | microweber | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-2168 | WordPress Download Manager < 3.2.44 - Authenticated Cross-Site Scripting | download manager | Attack Blocked by Atomicorp | 340148 , 341266 , 346755 |
| CVE-2022-2174 | microweber 1.2.18 - Cross-site Scripting | microweber | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-2187 | WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting | contact form 7 captcha | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-22242 | Juniper Web Device Manager - Cross-Site Scripting | junos | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2022-2290 | Trilium <0.52.4 - Cross-Site Scripting | trilium | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2022-23397 | Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting | ez-net portal | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 341099 , 341256 , 346755 , 347198 |
| CVE-2022-23808 | phpMyAdmin < 5.1.2 - Cross-Site Scripting | phpmyadmin | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-2383 | WordPress Feed Them Social <3.0.1 - Cross-Site Scripting | feed them social | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2022-24384 | SmarterTools SmarterTrack - Cross-Site Scripting | smartertrack | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 |
| CVE-2022-24899 | Contao <4.13.3 - Cross-Site Scripting | contao | Attack Blocked by Atomicorp | 341266 |
| CVE-2022-25323 | ZEROF Web Server 2.0 - Cross-Site Scripting | web server | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2022-2599 | WordPress Anti-Malware Security and Brute-Force Firewall <4.21.83 - Cross-Site Scripting | anti-malware security and brute-force firewall | Attack Blocked by Atomicorp | 341266 , 346755 , 347198 |
| CVE-2022-2627 | WordPress Newspaper < 12 - Cross-Site Scripting | newspaper | Attack Blocked by Atomicorp | 346755 |
| CVE-2022-26564 | HotelDruid Hotel Management Software 3.0.3 - Cross-Site Scripting | hoteldruid | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-2733 | Openemr < 7.0.0.1 - Cross-Site Scripting | openemr | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2022-27926 | Zimbra Collaboration (ZCS) - Cross Site Scripting | collaboration | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2022-28290 | WordPress Country Selector <1.6.6 - Cross-Site Scripting | wordpress country selector | Attack Blocked by Atomicorp | 340130 , 346755 |
| CVE-2022-28363 | Reprise License Manager 14.2 - Cross-Site Scripting | reprise license manager | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2022-28508 | MantisBT < 2.25.2 - Cross-Site Scripting | mantisbt | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-29004 | Diary Management System 1.0 - Cross-Site Scripting | e-diary management system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2022-29005 | Online Birth Certificate System 1.2 - Stored Cross-Site Scripting | online birth certificate system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2022-29296 | Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS) | genialcloud proj | Attack Blocked by Atomicorp | 344370 |
| CVE-2022-29548 | WSO2 - Cross-Site Scripting | api manager | Attack Blocked by Atomicorp | 346755 |
| CVE-2022-30489 | Wavlink WN-535G3 - Cross-Site Scripting | wn535g3 firmware | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-30513 | School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting | school dormitory management system | Attack Blocked by Atomicorp | 392301 |
| CVE-2022-30514 | School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting | school dormitory management system | Attack Blocked by Atomicorp | 346755 , 392301 |
| CVE-2022-3062 | Simple File List < 4.4.12 - Cross Site Scripting | simple-file-list | Attack Blocked by Atomicorp | 333141 , 346755 , 347198 |
| CVE-2022-30776 | Atmail 6.5.0 - Cross-Site Scripting | atmail | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 |
| CVE-2022-30777 | Parallels H-Sphere 3.6.1713 - Cross-Site Scripting | h-sphere | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-30983 | Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 Cross-Site Scripting Vulnerability | Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 346755 |
| CVE-2022-31299 | Haraj 3.7 - Cross-Site Scripting | haraj | Attack Blocked by Atomicorp | 340147 , 341266 |
| CVE-2022-31373 | SolarView Compact 6.00 - Cross-Site Scripting | sv-cpt-mc310 firmware | Attack Blocked by Atomicorp | 341266 |
| CVE-2022-31470 | Axigen WebMail - Cross-Site Scripting | webmail | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2022-32195 | Open edX <2022-06-06 - Cross-Site Scripting | open edx | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 |
| CVE-2022-3242 | Microweber <1.3.2 - Cross-Site Scripting | microweber | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-32770 | WWBN AVideo 11.6 - Cross-Site Scripting | avideo | Attack Blocked by Atomicorp | 333140 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-32771 | WWBN AVideo 11.6 - Cross-Site Scripting | avideo | Attack Blocked by Atomicorp | 333140 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-32772 | WWBN AVideo 11.6 - Cross-Site Scripting | avideo | Attack Blocked by Atomicorp | 333140 , 340147 , 341266 , 342259 |
| CVE-2022-33119 | NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting | nvrsolo firmware | Attack Blocked by Atomicorp | 340003 , 340158 , 342259 |
| CVE-2022-34048 | Wavlink WN-533A8 - Cross-Site Scripting | wn533a8 firmware | Attack Blocked by Atomicorp | 392301 |
| CVE-2022-34093 | Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting | i3geo | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2022-34094 | Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting | i3geo | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2022-34305 | Apache Tomcat Examples Web Application - Cross-Site Scripting | tomcat | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2022-34328 | PMB 7.3.10 - Cross-Site Scripting | pmb | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-3484 | WordPress WPB Show Core - Cross-Site Scripting | wpb show core | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2022-35155 | Bus Pass Management System 1.0 - Cross-Site Scripting (XSS) | bus pass management system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 345493 , 346755 , 390585 |
| CVE-2022-35416 | H3C SSL VPN <=2022-07-10 - Cross-Site Scripting | ssl vpn | Attack Blocked by Atomicorp | 342259 , 346755 |
| CVE-2022-35493 | eShop 3.0.4 - Cross-Site Scripting | eshop - ecommerce / store website | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2022-35653 | Moodle LTI module Reflected - Cross-Site Scripting | moodle | Attack Blocked by Atomicorp | 333141 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-3578 | WordPress ProfileGrid <5.1.1 - Cross-Site Scripting | profilegrid | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-37153 | Artica Proxy 4.30.000000 - Cross-Site Scripting | artica proxy | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 |
| CVE-2022-3766 | phpMyFAQ < 3.1.8 - Cross-Site Scripting | phpmyfaq | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 350148 |
| CVE-2022-38295 | Cuppa CMS v1.0 - Cross Site Scripting | cuppacms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-38463 | ServiceNow - Cross-Site Scripting | servicenow | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2022-38467 | CRM Perks Forms < 1.1.1 - Cross Site Scripting | crm perks forms | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350148 , 390720 |
| CVE-2022-38553 | Academy Learning Management System <5.9.1 - Cross-Site Scripting | academy learning management system | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 350147 , 350148 |
| CVE-2022-39195 | LISTSERV 17 - Cross-Site Scripting | listserv | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2022-40359 | Kae's File Manager <=1.4.7 - Cross-Site Scripting | kfm | Attack Blocked by Atomicorp | 340147 , 341266 , 346755 |
| CVE-2022-41441 | ReQlogic v11.3 - Cross Site Scripting | reqlogic | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-41473 | RPCMS 3.0.2 - Cross-Site Scripting | rpcms | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 350148 |
| CVE-2022-42118 | Liferay Portal - Cross-site Scripting | liferay portal | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 350148 |
| CVE-2022-42746 | CandidATS 3.0.0 - Cross-Site Scripting. | candidats | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-42747 | CandidATS 3.0.0 - Cross-Site Scripting. | candidats | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-42748 | CandidATS 3.0.0 - Cross-Site Scripting. | candidats | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-42749 | CandidATS 3.0.0 - Cross-Site Scripting | candidats | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-43014 | OpenCATS 0.9.6 - Cross-Site Scripting | opencats | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-43015 | OpenCATS 0.9.6 - Cross-Site Scripting | opencats | Attack Blocked by Atomicorp | 341266 |
| CVE-2022-43016 | OpenCATS 0.9.6 - Cross-Site Scripting | opencats | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2022-43017 | OpenCATS 0.9.6 - Cross-Site Scripting | opencats | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2022-43018 | OpenCATS 0.9.6 - Cross-Site Scripting | opencats | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 346755 |
| CVE-2022-45365 | Stock Ticker <= 3.23.2 - Cross-Site-Scripting | stock ticker | Attack Blocked by Atomicorp | 346755 |
| CVE-2022-45836 | WordPress Download Manager <= 3.2.59 - Reflected XSS | download manager | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 |
| CVE-2022-46073 | Helmet Store Showroom - Cross Site Scripting | helmet store showroom | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 350147 , 350148 |
| CVE-2022-46381 | Linear eMerge E3-Series - Cross-Site Scripting | linear emerge e3 access control firmware | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-46888 | NexusPHP <1.7.33 - Cross-Site Scripting | nexusphp | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 346755 , 350147 , 350148 , 360030 |
| CVE-2022-48012 | OpenCATS 0.9.7 - Cross-Site Scripting | opencats | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2022-48197 | Yahoo User Interface library (YUI2) TreeView v2.8.2 - Cross-Site Scripting | yui | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-4971 | Sassy Social Share <= 3.3.3 - Cross-Site Scripting | sassy social share | Attack Blocked by Atomicorp | 340099 , 341099 , 341258 , 346755 , 347198 |
| CVE-2023-0448 | WP Helper Lite < 4.3 - Cross-Site Scripting | wp helper premium | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2023-0514 | Membership Database <= 1.0 - Cross-Site Scripting | membership database | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2023-0527 | Online Security Guards Hiring System - Cross-Site Scripting | online security guards hiring system | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2023-0676 | phpIPAM 1.5.1 - Cross-site Scripting | phpipam | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2023-0942 | WordPress Japanized for WooCommerce <2.5.5 - Cross-Site Scripting | japanized for woocommerce | Attack Blocked by Atomicorp | 341266 , 346755 , 347198 |
| CVE-2023-0948 | WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting | japanized for woocommerce | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-0968 | WordPress Watu Quiz <3.3.9.1 - Cross-Site Scripting | watu quiz | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2023-1080 | WordPress GN Publisher <1.5.6 - Cross-Site Scripting | gn publisher | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2023-1546 | MyCryptoCheckout < 2.124 - Cross-Site Scripting | mycryptocheckout | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-1780 | Companion Sitemap Generator < 4.5.3 - Cross-Site Scripting | companion sitemap generator | Attack Blocked by Atomicorp | 333141 , 346755 , 347198 |
| CVE-2023-1880 | Phpmyfaq v3.1.11 - Cross-Site Scripting | phpmyfaq | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-1893 | Login Configurator <=2.1 - Cross-Site Scripting | login configurator | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-2023 | Custom 404 Pro < 3.7.3 - Cross-Site Scripting | custom 404 pro | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2023-2256 | WordPress Product Addons & Fields for WooCommerce < 32.0.7 - Cross-Site Scripting | woocommerce-product-addon | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-23161 | Art Gallery Management System Project v1.0 - Cross-Site Scripting | art gallery management system | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2023-23491 | Quick Event Manager < 9.7.5 - Cross-Site Scripting | quick event manager | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-24278 | Squidex <7.4.0 - Cross-Site Scripting | squidex | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2023-24322 | mojoPortal 2.7.0.0 - Cross-Site Scripting | mojoportal | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2023-24488 | Citrix Gateway and Citrix ADC - Cross-Site Scripting | gateway | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 341266 , 342259 , 360151 , 390722 |
| CVE-2023-24657 | phpIPAM - 1.6 - Cross-Site Scripting | phpipam | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-24733 | PMB 7.4.6 - Cross-Site Scripting | pmb | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 350148 |
| CVE-2023-24737 | PMB v7.4.6 - Cross-Site Scripting | pmb | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 350148 |
| CVE-2023-25346 | ChurchCRM 4.5.3 - Cross-Site Scripting | churchcrm | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-27008 | ATutor < 2.2.1 - Cross Site Scripting | atutor | Attack Blocked by Atomicorp | 344363 , 346755 , 350148 |
| CVE-2023-27641 | L-Soft LISTSERV 16.5 - Cross-Site Scripting | listserv | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-27922 | Newsletter < 7.6.9 - Cross-Site Scripting | newsletter | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-2822 | Ellucian Ethos Identity CAS - Cross-Site Scripting | ethos identity | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2023-29439 | FooGallery plugin <= 2.2.35 - Cross-Site Scripting | foogallery | Attack Blocked by Atomicorp | 340147 , 341266 |
| CVE-2023-2948 | OpenEMR < 7.0.1 - Cross-Site Scripting | openemr | Attack Blocked by Atomicorp | 344363 , 346755 |
| CVE-2023-29489 | cPanel < 11.109.9999.116 - Cross-Site Scripting | cpanel | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 |
| CVE-2023-2949 | OpenEMR < 7.0.1 - Cross-site Scripting | openemr | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2023-29506 | XWiki >= 13.10.8 - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 346755 |
| CVE-2023-29623 | Purchase Order Management v1.0 - Cross Site Scripting (Reflected) | purchase order management | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 342259 , 346755 |
| CVE-2023-30210 | OURPHP <= 7.2.0 - Cross Site Scripting | ourphp | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2023-30212 | OURPHP <= 7.2.0 - Cross Site Scripting | ourphp | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-30256 | Webkul QloApps 1.5.2 - Cross-site Scripting | qloapps | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 346755 , 347198 |
| CVE-2023-30777 | Advanced Custom Fields < 6.1.6 - Cross-Site Scripting | advanced custom fields | Attack Blocked by Atomicorp | 333141 , 347198 |
| CVE-2023-30868 | Tree Page View Plugin < 1.6.7 - Cross-Site Scripting | cms tree page view | Attack Blocked by Atomicorp | 341266 |
| CVE-2023-34599 | Gibbon v25.0.0 - Cross-Site Scripting | gibbon | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-3479 | Hestiacp <= 1.7.7 - Cross-Site Scripting | control panel | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-35155 | XWiki - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 |
| CVE-2023-35156 | XWiki >= 6.0-rc-1 - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2023-35159 | XWiki >= 3.4-milestone-1 - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2023-35160 | XWiki >= 2.5-milestone-2 - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2023-35161 | XWiki >= 6.2-milestone-1 - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2023-35162 | XWiki < 14.10.5 - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2023-3521 | FOSSBilling < 0.5.3 - Cross-Site Scripting | fossbilling | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2023-36287 | Webkul QloApps 1.6.0 - Cross-site Scripting | qloapps | Attack Blocked by Atomicorp | 350148 |
| CVE-2023-36289 | Webkul QloApps 1.6.0 - Cross-site Scripting | qloapps | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 346755 |
| CVE-2023-36306 | Adiscon LogAnalyzer v.4.1.13 - Cross-Site Scripting | loganalyzer | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-36346 | POS Codekop v2.0 - Cross Site Scripting | codekop | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2023-37580 | Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting | zimbra | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2023-37728 | IceWarp Webmail Server v10.2.1 - Cross Site Scripting | icewarp | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 |
| CVE-2023-37979 | Ninja Forms < 3.6.26 - Cross-Site Scripting | ninja forms | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2023-37988 | Contact Form Generator <= 2.5.5 - Cross-Site Scripting | contact form generator | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-38040 | Revive Adserver 5.4.1 - Cross-Site Scripting | revive adserver | Attack Blocked by Atomicorp | 340147 , 341256 , 341266 , 346755 |
| CVE-2023-38192 | SuperWebMailer 9.00.0.01710 - Cross-Site Scripting | superwebmailer | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 |
| CVE-2023-38194 | SuperWebMailer - Cross-Site Scripting | superwebmailer | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2023-3843 | mooDating 1.2 - Cross-site scripting | moodating | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-3844 | MooDating 1.2 - Cross-Site Scripting | moodating | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-3845 | MooDating 1.2 - Cross-Site Scripting | moodating | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-3846 | MooDating 1.2 - Cross-Site Scripting | moodating | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-3847 | MooDating 1.2 - Cross-Site scripting | moodating | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-3848 | MooDating 1.2 - Cross-site scripting | moodating | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-3849 | mooDating 1.2 - Cross-site scripting | moodating | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-38501 | CopyParty v1.8.6 - Cross Site Scripting | copyparty | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 , 390722 |
| CVE-2023-38875 | PHP Login System 2.0.1 - Cross-Site Scripting | php-login-system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-38910 | CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' ) | csz cms | Attack Blocked by Atomicorp | 333141 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-38964 | Academy LMS 6.0 - Cross-Site Scripting | academy lms | Attack Blocked by Atomicorp | 333141 , 342259 , 347198 , 350147 , 350148 |
| CVE-2023-39598 | IceWarp Email Client - Cross Site Scripting | webclient | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 350147 |
| CVE-2023-39600 | IceWarp 11.4.6.0 - Cross-Site Scripting | icewarp | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 |
| CVE-2023-39676 | PrestaShop fieldpopupnewsletter Module - Cross Site Scripting | fieldpopupnewsletter | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-39700 | IceWarp Mail Server v10.4.5 - Cross-Site Scripting | mail server | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 |
| CVE-2023-3990 | Mingsoft MCMS < 5.3.1 - Cross-Site Scripting | mcms | Attack Blocked by Atomicorp | 342259 , 350148 |
| CVE-2023-40208 | Stock Ticker <= 3.23.2 - Cross-Site Scripting | stock ticker | Attack Blocked by Atomicorp | 346755 |
| CVE-2023-40750 | PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting | yacht listing script | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 |
| CVE-2023-40751 | PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting | fundraising script | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 |
| CVE-2023-40752 | PHPJabbers Make an Offer Widget v1.0 - Cross-Site Scripting | make an offer widget | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 |
| CVE-2023-40755 | PHPJabbers Callback Widget v1.0 - Cross-Site Scripting | callback widget | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2023-4110 | PHPJabbers Availability Booking Calendar 5.0 - Cross-Site Scripting | availability booking calendar | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-4111 | PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting | bus reservation system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-4112 | PHPJabbers Shuttle Booking Software 1.0 - Cross Site Scripting | shuttle booking software | Attack Blocked by Atomicorp | 340147 , 341266 , 346755 |
| CVE-2023-4113 | PHPJabbers Service Booking Script 1.0 - Cross Site Scripting | service booking script | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-4114 | PHP Jabbers Night Club Booking 1.0 - Cross Site Scripting | night club booking software | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-4115 | PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting | cleaning business software | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-4116 | PHPJabbers Taxi Booking 2.0 - Cross Site Scripting | taxi booking script | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-4136 | CrafterCMS Engine - Cross-Site Scripting | craftercms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2023-4148 | Ditty < 3.1.25 - Cross-Site Scripting | ditty | Attack Blocked by Atomicorp | 340148 , 341266 , 346755 |
| CVE-2023-41538 | PHPJabbers PHP Forum Script 3.0 - Cross-Site Scripting | php forum script | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-41597 | EyouCms v1.6.2 - Cross-Site Scripting | eyoucms | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-41621 | Emlog Pro v2.1.14 - Cross-Site Scripting | emlog | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2023-4173 | mooSocial 3.1.8 - Reflected XSS | moostore | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-4174 | mooSocial 3.1.6 - Reflected Cross Site Scripting | moostore | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 341099 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2023-42343 | OpenCMS - Cross-Site Scripting | opencms | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2023-43325 | MooSocial 3.1.8 - Cross-Site Scripting | moosocial | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-43326 | MooSocial 3.1.8 - Cross-Site Scripting | moosocial | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2023-44012 | mojoPortal v.2.7.0.0 - Cross-Site Scripting | mojoportal | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 344370 , 346755 , 347198 , 350147 , 350148 |
| CVE-2023-44352 | Adobe Coldfusion - Cross-Site Scripting | coldfusion | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 341266 , 346755 , 347198 |
| CVE-2023-44393 | Piwigo - Cross-Site Scripting | piwigo | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-4451 | Cockpit - Cross-Site Scripting | cockpit | Attack Blocked by Atomicorp | 340099 , 341099 , 346755 , 347198 |
| CVE-2023-44812 | mooSocial v.3.1.8 - Cross-Site Scripting | moosocial | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 |
| CVE-2023-44813 | mooSocial v.3.1.8 - Cross-Site Scripting | moosocial | Attack Blocked by Atomicorp | 346755 |
| CVE-2023-4547 | SPA-Cart eCommerce CMS 1.9.0.3 - Cross-Site Scripting | ecommerce cms | Attack Blocked by Atomicorp | 333140 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-45542 | MooSocial 3.1.8 - Cross-Site Scripting | moosocial | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 , 350147 , 350148 |
| CVE-2023-46020 | Blood Bank v1.0 - Stored Cross Site Scripting (XSS) | blood bank | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 345493 , 346755 , 350147 , 350148 |
| CVE-2023-46732 | XWiki < 14.10.14 - Cross-Site Scripting | xwiki | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-47684 | Essential Grid <= 3.1.0 - Cross-Site Scripting | essential grid | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-48728 | WWBN AVideo 11.6 - Cross-Site Scripting | avideo | Attack Blocked by Atomicorp | 340147 , 340148 , 341245 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-49293 | Vite dev server - Cross-Site Scripting | vite | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-49489 | KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS) | kodexplorer | Attack Blocked by Atomicorp | 342259 , 346755 |
| CVE-2023-49494 | DedeCMS v5.7.111 - Cross-Site Scripting | dedecms | Attack Blocked by Atomicorp | 333141 , 340087 , 340095 , 340099 , 340149 , 341099 , 341256 , 342259 , 346755 |
| CVE-2023-4973 | Academy LMS 6.2 - Cross-Site Scripting | academy lms | Attack Blocked by Atomicorp | 340147 , 346755 , 350148 |
| CVE-2023-5244 | Microweber < V.2.0 - Cross-Site Scripting | microweber | Attack Blocked by Atomicorp | 346755 , 380026 , 393655 |
| CVE-2023-5558 | LearnPress < 4.2.5.5 - Cross-Site Scripting | learnpress | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 , 390722 , 392301 |
| CVE-2023-5758 | firefox mobile Cross-Site Scripting Vulnerability | firefox mobile | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-5863 | phpMyFAQ < 3.2.0 - Cross-site Scripting | phpmyfaq | Attack Blocked by Atomicorp | 333141 , 340248 , 342259 , 346755 , 350148 |
| CVE-2023-6000 | WordPress Popup Builder <= 4.2.3 - Unauthenticated Stored XSS | popup builder | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2023-6275 | TOTVS Fluig Platform - Cross-Site Scripting | fluig | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-6379 | OpenCMS 14 & 15 - Cross Site Scripting | opencms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-6568 | Mlflow - Cross-Site Scripting | mlflow | Attack Blocked by Atomicorp | 334168 , 391213 |
| CVE-2023-6697 | WP Go Maps (formerly WP Google Maps) < 9.0.29 - Cross-Site Scripting | wp go maps | Attack Blocked by Atomicorp | 340099 , 341099 , 346755 , 347198 |
| CVE-2024-12585 | PropertyHive < 2.1.1 - Cross-Site Scripting | propertyhive | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2024-12724 | WP DeskLite - Reflected XSS | wp desklite | Attack Blocked by Atomicorp | 340148 , 341266 , 346755 |
| CVE-2024-12732 | AffiliateImporterEb <= 1.0.6 - Reflected XSS | affiliateimportereb | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-12734 | Advance Post Prefix WordPress plugin - Reflected XSS | advance post prefix | Attack Blocked by Atomicorp | 341266 , 377360 |
| CVE-2024-12737 | WP BASE Booking - Reflected XSS | wp base booking of appointments, services and events | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-12873 | Custom Field Manager WordPress - Cross-Site Scripting | custom field manager | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13112 | WP MediaTagger <= 4.1.1 - Cross-Site Scripting | wp mediatagger | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13114 | WP Projects Portfolio <= 3.0 - Cross-Site Scripting | wp projects portfolio with client testimonials | Attack Blocked by Atomicorp | 340148 , 341266 , 346755 , 377360 |
| CVE-2024-13219 | Privacy Policy Genius - Cross-Site Scripting | privacy policy genius | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13220 | WordPress Google Map Professional - Cross-Site Scripting | google map professional | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13221 | Fantastic ElasticSearch Plugin <= 4.1.0 - Cross-Site Scripting | fantastic elasticsearch | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13222 | WordPress User Messages <= 1.2.4 - Reflected XSS | user messages | Attack Blocked by Atomicorp | 341266 , 346755 , 390585 |
| CVE-2024-13224 | SlideDeck 1 Lite Content Slider - Cross-Site Scripting | slidedeck 1 lite content slider | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13225 | ECT Home Page Products - Reflected XSS | ect home page products | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13226 | A5 Custom Login Page - Reflected XSS | a5 custom login page | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13325 | Glossy WordPress - Reflected XSS | glossy | Attack Blocked by Atomicorp | 341266 , 377360 |
| CVE-2024-13326 | iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting | ibuildapp | Attack Blocked by Atomicorp | 341266 , 377360 |
| CVE-2024-13327 | Musicbox WordPress - Reflected XSS | musicbox | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13328 | Giga Messenger WordPress - Cross-Site Scripting | giga messenger | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2024-13331 | WP Dream Carousel < 1.0.1b - Cross-Site Scripting | wp dream carousel | Attack Blocked by Atomicorp | 340148 , 341266 , 346755 , 377360 |
| CVE-2024-13492 | Guten Free Options - Cross Site Scripting | guten free options | Attack Blocked by Atomicorp | 341266 , 377360 |
| CVE-2024-13543 | Zarinpal Paid Download - Reflected XSS | zarinpal paid download | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13570 | WordPress Stray Random Quotes <= 1.9.9 - Cross-Site Scripting | stray random quotes | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13619 | LifterLMS < 8.0.1 - Cross-Site Scripting | lifterlms | Attack Blocked by Atomicorp | 340148 , 341266 , 346755 , 377360 |
| CVE-2024-13628 | WP Pricing Table - Reflected XSS | wp pricing table | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13630 | NewsTicker <= 1.0 - Reflected Cross-Site Scripting | newsticker | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13634 | Post Sync Plugin <= 1.1 - Cross-Site Scripting | post sync | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13727 | MemberSpace WordPress - Cross-Site Scripting | memberspace | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-13853 | WordPress SEO Tools Plugin 4.0.7 - Cross-Site Scripting | seo-automatic-seo-tools | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-24131 | SuperWebMailer 9.31.0.01799 - Cross-Site Scripting | superwebmailer | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2024-24494 | Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS) | daily habit tracker | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 344370 , 346755 , 350148 , 360151 |
| CVE-2024-28623 | RiteCMS 3.0.0 - Cross-site Scripting | ritecms | Attack Blocked by Atomicorp | 346755 , 380026 |
| CVE-2024-28734 | Coda v.2024Q1 - Cross-Site Scripting | Unit4 Financials by Coda prior to 2023Q4 | Attack Blocked by Atomicorp | 340112 , 340113 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-29138 | WordPress Restrict User Access <= 2.5 - Cross-Site Scripting | restrict user access | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2024-29792 | Unlimited Elements for Elementor <= 1.5.93 - Cross Site Scripting | unlimited elements for elementor | Attack Blocked by Atomicorp | 346755 , 347198 , 377360 |
| CVE-2024-29931 | WP Go Maps <= 9.0.29 - Cross-Site Scripting | wp go maps | Attack Blocked by Atomicorp | 341266 , 344370 , 346755 , 377360 |
| CVE-2024-30194 | Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting | sunshine photo cart | Attack Blocked by Atomicorp | 333141 , 340149 , 344361 , 344364 , 346755 , 347198 , 377360 |
| CVE-2024-3231 | Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting | popup4phone | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-33326 | LumisXP - Cross-site Scripting | lumis experience platform | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2024-3378 | iboss Secure Web Gateway - Stored Cross-Site Scripting (XSS) | secure web gateway | Attack Blocked by Atomicorp | 392301 |
| CVE-2024-3469 | GP Premium <= 2.4.0 - Cross-Site Scripting | gp-premium | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2024-35627 | TileServer API - Cross Site Scripting | tileserver-gl up to v4.4.10 | Attack Blocked by Atomicorp | 346755 |
| CVE-2024-35693 | WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting | 12 step meeting list | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 347198 |
| CVE-2024-35694 | Wordpress WPMobile.App >= 11.42 - Cross-Site Scripting | wpmobile.app | Attack Blocked by Atomicorp | 340147 , 341266 |
| CVE-2024-36599 | AEGON LIFE v1.0 Life Insurance Management System - Stored cross-site scripting (XSS) | life insurance management system | Detected by Atomicorp | 345493 |
| CVE-2024-37259 | WP Extended < 3.0.0 - Stored Cross-Site Scripting | wp extended | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2024-37261 | WP-Lister Lite for Amazon <= 2.6.16 - Cross-Site Scripting | wp-lister lite for amazon | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2024-39646 | WordPress Custom 404 Pro <= 3.11.1 - Reflected XSS | custom 404 pro | Attack Blocked by Atomicorp | 346755 , 347198 , 377360 |
| CVE-2024-41810 | Twisted - Open Redirect & XSS | twisted | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-42852 | AcuToWeb server/10.5.0.7577c8b - Cross-Site Scripting | acutoweb | Attack Blocked by Atomicorp | 346755 |
| CVE-2024-43971 | Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting | sunshine photo cart | Attack Blocked by Atomicorp | 344361 , 344364 , 347198 , 377360 |
| CVE-2024-4455 | YITH WooCommerce Ajax Search <= 2.4.0 - Cross-Site Scripting | yith woocommerce ajax search | Detected by Atomicorp | 377360 |
| CVE-2024-47374 | LiteSpeed Cache <= 6.5.0.2 - Stored XSS | litespeed cache | Detected by Atomicorp | 377360 |
| CVE-2024-55218 | IceWarp Server 10.2.1 - Cross-Site Scripting | mail server | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 |
| CVE-2024-6517 | Contact Form 7 Math Captcha <= 2.0.1 - Cross-site Scripting | ds-cf7-math-captcha | Attack Blocked by Atomicorp | 346755 |
| CVE-2024-6651 | WordPress File Upload Plugin < 4.24.8 - Cross-Site Scripting | wp-file-upload | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-6753 | Social Auto Poster <= 5.3.14 - Stored Cross-Site Scripting | social auto poster | Detected by Atomicorp | 377360 |
| CVE-2024-6892 | Journyx 11.5.4 - Reflected Cross Site Scripting | journyx | Attack Blocked by Atomicorp | 333141 |
| CVE-2024-7313 | Shield Security Plugin < 20.0.6 - Cross-Site Scripting | shield security | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2024-7354 | Ninja Forms 3.8.6-3.8.10 - Cross-Site Scripting | ninja forms | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2025-1303 | Plugin Oficial – Getnet para WooCommerce <= 1.8.0 - Cross-Site Scripting | plugin oficial | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2025-25296 | Label Studio < 1.16.0 - Cross-Site Scripting | label studio | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344370 , 346755 , 347198 |
| CVE-2025-2609 | MagnusBilling Login Logs - Cross-Site Scripting | magnusbilling | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2025-27506 | NocoDB < 0.258.0 - Reflected XSS in Password Reset | nocodb | Attack Blocked by Atomicorp | 341266 , 347198 |
| CVE-2025-46349 | YesWiki Reflected XSS via File Upload | yeswiki | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2025-4652 | Broadstreet WordPress plugin - Reflected XSS | broadstreet | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 377360 |
| CVE-2025-46549 | YesWiki <= 4.5.1 - Cross-Site Scripting | yeswiki | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2025-46550 | YesWiki < 4.5.4 - Cross-Site Scripting | yeswiki | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2025-48954 | Discourse OAuth Social Login - Cross-site Scripting | discourse | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 344362 , 346755 , 347198 , 350148 , 390712 |
| CVE-2025-51501 | Microweber CMS2.0 - Cross-Site Scripting | microweber | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-51502 | Microweber CMS 2.0 - Reflected XSS in Admin Page Creation | microweber | Attack Blocked by Atomicorp | 333140 , 341266 |
| CVE-2025-5301 | ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting | Docs (DocumentServer) | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-54589 | Copyparty <=1.18.6 - Cross-Site Scripting | copyparty | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-54597 | Heimdall Application Dashboard < 2.7.3 - Reflected XSS | heimdall | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 341099 , 342259 , 347198 , 350147 , 350148 |
| CVE-2025-63607 | TechStore 1.0 Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-65341 | Ecommerce Fruits Bazar 1.0 Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 342259 |
| CVE-2026-0561 | Shield Security <= 21.0.8 - Unauthenticated Reflected XSS | shield-security | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 346755 |
| CVE-2026-0594 | WordPress List Site Contributors < 1.1.8 - Reflected XSS | List Site Contributors | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2026-11588 | EONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post Creation | EONSR AEO Agent | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-11881 | Fluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time Field | Fluent Forms | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-12982 | Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery | Document Gallery | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-13330 | Animation Addons for Elementor < 2.7.0 - Author+ Stored XSS via SVG Upload | Animation Addons for Elementor | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-13400 | Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information | Simply Schedule Appointments | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-14190 | Sina Extension for Elementor < 3.10.2 - Reflected XSS | Sina Extension for Elementor | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-14207 | LifterLMS < 10.0.10 - Instructor+ Stored XSS via Featured Pricing Information | LifterLMS | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-14841 | King Addons for Elementor < 51.1.76 - Reflected XSS via Posts Grid Widget | King Addons for Elementor | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-14845 | NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget | NewStatPress | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-14921 | Ultimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons Shortcode | Ultimate Addons for WPBakery Page Builder | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 346755 |
| CVE-2026-15094 | WP Hotel Booking <= 2.3.2 - Cross-Site Scripting | wp-hotel-booking | Attack Blocked by Atomicorp | 300002 |
| CVE-2026-17505 | WordPress TranslatePress < 3.2.6 - Cross-Site Scripting | translatepress-multilingual | Attack Blocked by Atomicorp | 333141 , 341256 , 346755 , 347198 , 350148 |
| CVE-2026-17532 | Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting | Seraphinite Accelerator | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-25616 | Blesta <= 5.13.1 - Cross-Site Scripting | blesta | Attack Blocked by Atomicorp | 340112 , 346755 , 350148 |
| CVE-2026-26028 | CryptPad: Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection and Potential XSS | cryptpad | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-26483 | Mettle SendPortal 3.0.1 and earlier Cross-Site Scripting Vulnerability | Mettle SendPortal 3.0.1 and earlier | Attack Blocked by Atomicorp | 333140 |
| CVE-2026-29183 | SiYuan Note - Cross-Site Scripting | siyuan | Attack Blocked by Atomicorp | 300013 , 340147 , 341266 , 347198 |
| CVE-2026-3001 | Gutenverse Plugin <= 3.4.6 - Cross-Site Scripting | gutenverse | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 , 390585 |
| CVE-2026-30251 | zenshare suite Cross-Site Scripting Vulnerability | zenshare suite | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-30252 | zencrm Cross-Site Scripting Vulnerability | zencrm | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 , 360030 |
| CVE-2026-34206 | Captcha Protect: Reflected XSS in challenge page via unsanitized destination rendered with text/template | captcha protect | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-34229 | Emlog: Stored XSS in Comment Module via URI Scheme Validation Bypass | emlog | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34396 | AVideo: Stored XSS via Unescaped Plugin Configuration Values in Admin Panel | avideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34739 | AVideo: Reflected XSS via Unescaped ip Parameter in User_Location testIP.php | avideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-36324 | SourceCodester Doctor Appointment System 1.0 Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-36725 | FastapiAdmin v2.2.0 Cross-Site Scripting Vulnerability | FastapiAdmin v2.2.0 | Attack Blocked by Atomicorp | 333140 |
| CVE-2026-37750 | School Management System by mahmoudai1 Cross-Site Scripting Vulnerability | School Management System by mahmoudai1 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-38432 | erpnext Cross-Site Scripting Vulnerability | erpnext | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-38444 | osTicket v1.18.3 Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 |
| CVE-2026-38446 | Cross-Site Scripting | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-38472 | forum reward comments in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 Cross-Site Scripting Vulnerability | forum reward comments in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-38947 | FluentCMS 1.2.3 Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-39275 | Cockpit CMS v.2.13.5 and before Arbitrary Code Execution Vulnerability | Cockpit CMS v.2.13.5 and before | Attack Blocked by Atomicorp | 340099 , 341099 |
| CVE-2026-41580 | Stirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author) | stirling pdf | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-42253 | Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties | activemq | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340099 , 340147 , 341099 , 341266 |
| CVE-2026-51565 | Modules/Docs/DocsController.php in Milk admin <=0.9.8 Cross-Site Scripting Vulnerability | Modules/Docs/DocsController.php in Milk admin <=0.9.8 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-52232 | FS Inc S3150-8T2F Switch 2.2.0D Build 118101 Cross-Site Scripting Vulnerability | FS Inc S3150-8T2F Switch 2.2.0D Build 118101 | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-52475 | aiflowy <= 2.1.2 Cross-Site Scripting Vulnerability | aiflowy <= 2.1.2 | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-55087 | Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (ope | etherpad | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-61526 | AdonisJS HTTP Server is vulnerable to reflected XSS through its exception handler | http-server | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-73084 | Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint | activepieces | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-75170 | the HubCore platform (version 14.1.1) Cross-Site Scripting Vulnerability | the HubCore platform (version 14.1.1) | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-75307 | zhitan-ems 1.0.0 Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-78738 | Silverpeas Core 6.4.6 Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 340099 , 341099 |
| CVE-2026-78742 | Silverpeas Core <=6.4.6 Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-8447 | Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untruste | langflow | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-6717 | Keycloak: xss via assertion consumer service url in saml post-binding flow | Red Hat AMQ Broker 7 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-3753 | Hostel < 1.1.5.3 - Cross-Site Scripting | hostel | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2025-28906 | Skitter Slideshow <= 2.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting | Skitter Slideshow | Attack Blocked by Atomicorp | 346755 , 377360 |
| CVE-2026-84193 | LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP | librenms | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-88055 | AnythingLLM: Stored XSS Due to Unescaped Server-Side HTML Concatenation in MetaGenerator | anything-llm | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 342259 |
| CVE-2014-8674 | SO Planning 1.32 - Multiple Vulnerabilities | soplanning | Attack Blocked by Atomicorp | 331028 , 340016 , 340017 , 340144 , 340155 , 340156 , 340157 , 340159 , 341155 , 341245 , 344363 , 344370 , 360147 , 360148 , 360153 , 390726 , 392647 |
| CVE-2016-10993 | ScoreMe Theme - Cross-Site Scripting | scoreme | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-9316 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities | interscan web security virtual appliance | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2017-12544 | HPE System Management - Cross-Site Scripting | system management homepage | Attack Blocked by Atomicorp | 344366 |
| CVE-2017-14186 | FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting | fortios | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2017-17092 | WordPress < 4.9.1 - Authenticated JavaScript File Upload | WordPress | Detected by Atomicorp | 377360 |
| CVE-2017-3131 | Fortinet FortiOS < 5.6.0 - Cross-Site Scripting | fortios | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 344370 , 346755 , 347198 , 350147 , 350148 , 390727 , 392301 , 392648 |
| CVE-2017-6340 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities | interscan web security virtual appliance | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 345493 , 346755 , 350148 , 390724 |
| CVE-2018-12095 | OEcms 3.1 - Cross-Site Scripting | oecms | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 346755 |
| CVE-2018-15917 | Jorani Leave Management System 0.6.5 - Cross-Site Scripting | jorani | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-16363 | WordPress File Manager < 3.0 - Cross-Site Scripting | file manager | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2018-16736 | Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting | rcfilters | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2018-5405 | KACE System Management Appliance (SMA) < 9.0.270 - Multiple Vulnerabilities | kace systems management appliance firmware | Attack Blocked by Atomicorp | 390727 , 392301 , 392648 |
| CVE-2018-6226 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | email encryption gateway | Attack Blocked by Atomicorp | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2018-6227 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | email encryption gateway | Attack Blocked by Atomicorp | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2019-11370 | Carel pCOWeb <B1.2.4 - Cross-Site Scripting | pcoweb card firmware | Attack Blocked by Atomicorp | 342259 |
| CVE-2019-9556 | Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting | an5506-04-f firmware | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2020-10385 | WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting | contact form | Attack Blocked by Atomicorp | 345493 , 346755 |
| CVE-2020-11110 | Grafana <= 6.7.1 - Cross-Site Scripting | grafana | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2020-11456 | LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting | limesurvey | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 342259 , 346755 |
| CVE-2020-11457 | pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting | pfsense | Attack Blocked by Atomicorp | 333141 , 342259 , 345493 |
| CVE-2020-12256 | rConfig 3.9.4 - Cross-Site Scripting | rconfig | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-12259 | rConfig 3.9.4 - Cross-Site Scripting | rconfig | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-12262 | Intelbras TIP200/TIP200LITE/TIP300 - Cross-Site Scripting | tip300 | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2020-12706 | php-fusion 9.03.50 - Persistent Cross-Site Scripting | php-fusion | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 346755 |
| CVE-2020-15038 | Wordpress Plugin Maintenance Mode by SeedProd 5.1.1 - Persistent Cross-Site Scripting | coming soon page, under construction & maintenance mode | Detected by Atomicorp | 345493 |
| CVE-2020-20285 | ZZcms - Cross-Site Scripting | zzcms | Attack Blocked by Atomicorp | 333141 , 340003 , 340099 , 341099 , 342259 |
| CVE-2020-20988 | DomainMOD 4.13.0 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-24963 | Best Support System 3.0.4 - 'ticket_body' Persistent XSS (Authenticated) | best support system | Attack Blocked by Atomicorp | 333141 , 344370 , 360151 |
| CVE-2020-27533 | DedeCMS v.5.8 - keyword Cross-Site Scripting | dedecms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 345493 , 346755 , 350147 , 350148 , 390585 |
| CVE-2020-29233 | WonderCMS 3.1.3 - 'content' Persistent Cross-Site Scripting | wondercms | Detected by Atomicorp | 345493 |
| CVE-2020-35774 | twitter-server Cross-Site Scripting | twitter-server | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2020-7108 | WordPress Plugin LearnDash LMS 3.1.2 - Reflective Cross-Site Scripting | learndash | Attack Blocked by Atomicorp | 340003 , 341266 , 346755 , 390585 , 390727 , 392301 , 392648 |
| CVE-2020-9467 | Piwigo 2.10.1 - Cross Site Scripting | piwigo | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2021-25065 | Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting | smash balloon social post feed | Attack Blocked by Atomicorp | 341266 , 346755 , 347198 |
| CVE-2021-25067 | Landing Page Builder < 1.4.9.6 - Cross-Site Scripting | landing page | Attack Blocked by Atomicorp | 333141 , 347198 |
| CVE-2021-29460 | Kirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS) | kirby | Attack Blocked by Atomicorp | 330791 , 340152 |
| CVE-2021-31250 | CHIYU TCP/IP Converter - Cross-Site Scripting | bf-430 firmware | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2021-33851 | WordPress Customize Login Image <3.5.3 - Cross-Site Scripting | customize login image | Detected by Atomicorp | 377360 |
| CVE-2021-35956 | AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS) | sensorprobe2 firmware | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 350147 |
| CVE-2021-36873 | WordPress iQ Block Country <=1.2.11 - Cross-Site Scripting | iq block country | Detected by Atomicorp | 377360 |
| CVE-2021-40577 | Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting | online enrollment management system | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 , 350148 |
| CVE-2021-46005 | Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting | car rental management system | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-0020 | Palo Alto Cortex XSOAR 6.5.0 - Stored Cross-Site Scripting (XSS) | cortex xsoar | Attack Blocked by Atomicorp | 330791 , 333141 , 340152 , 341256 , 342259 , 346755 |
| CVE-2022-0148 | WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting | mystickyelements | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2022-0378 | Microweber Cross-Site Scripting | microweber | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2022-0765 | WordPress Loco Translate < 2.6.1 - Cross-Site Scripting | loco translate | Detected by Atomicorp | 377360 |
| CVE-2022-0928 | Microweber < 1.2.12 - Stored Cross-Site Scripting | microweber | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-0954 | Microweber <1.2.11 - Stored Cross-Site Scripting | microweber | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-25489 | Atom CMS v2.0 - Cross-Site Scripting | atomcms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2022-34140 | Feehi CMS 2.1.1 - Remote Code Execution (Authenticated) | feehi cms | Attack Blocked by Atomicorp | 330791 , 340152 , 345493 |
| CVE-2022-3506 | WordPress Related Posts <2.1.3 - Stored Cross-Site Scripting | related posts | Detected by Atomicorp | 377360 |
| CVE-2022-41358 | Garage Management System 1.0 (categoriesName) - Stored XSS | garage management system | Attack Blocked by Atomicorp | 330791 , 340152 |
| CVE-2022-48178 | X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated) | x2crm | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 390585 |
| CVE-2023-0902 | Employee Task Management System v1.0 - SQL Injection on edit-task.php | simple food ordering system | Attack Blocked by Atomicorp | 340016 , 340017 , 340157 , 340159 , 341245 , 360147 , 360148 |
| CVE-2023-1315 | osTicket < v1.16.6 - Cross-Site Scripting | osticket | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-1317 | osTicket < v1.16.6 - Cross-Site Scripting | osticket | Attack Blocked by Atomicorp | 340099 , 341099 , 347198 |
| CVE-2023-1318 | osTicket < v1.16.6 - Cross-Site Scripting | osticket | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2023-26842 | ChurchCRM 4.5.3 - Cross-Site Scripting | churchcrm | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 350148 |
| CVE-2023-26843 | ChurchCRM 4.5.3 - Cross-Site Scripting | churchcrm | Attack Blocked by Atomicorp | 333141 |
| CVE-2023-28665 | Woo Bulk Price Update <2.2.2 - Cross-Site Scripting | bulk price update for woocommerce | Attack Blocked by Atomicorp | 347198 |
| CVE-2023-31548 | ChurchCRM v4.5.3 - Cross-Site Scripting | churchcrm | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 |
| CVE-2023-34537 | Hoteldruid 3.0.5 - Cross-Site Scripting | hoteldruid | Attack Blocked by Atomicorp | 340130 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-38911 | CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery') | csz cms | Attack Blocked by Atomicorp | 333141 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-40355 | Axigen WebMail - Cross-Site Scripting | axigen mobile webmail | Attack Blocked by Atomicorp | 346755 |
| CVE-2023-40753 | PHPJabbers Ticket Support Script v3.2 - Cross-Site Scripting | ticket support script | Attack Blocked by Atomicorp | 341266 |
| CVE-2023-4382 | Hyip Rio 2.1 - Arbitrary File Upload | hyip rio | Attack Blocked by Atomicorp | 392301 |
| CVE-2023-5452 | SnipeIT 6.2.1 - Stored Cross Site Scripting | snipe-it | Attack Blocked by Atomicorp | 333140 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2023-7246 | System Dashboard < 2.8.10 - Cross-Site Scripting | system dashboard | Detected by Atomicorp | 377360 |
| CVE-2024-10146 | Simple File List < 6.1.13 - Reflected Cross-Site Scripting | simple file list | Attack Blocked by Atomicorp | 340087 , 341266 , 346755 , 377360 |
| CVE-2024-13097 | WP Finance Plugin <= 1.3.6 - Cross-Site Scripting | wp finance | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13098 | WordPress Email Newsletter - Reflected XSS | wordpress email newsletter | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-13099 | Widget4Call WordPress - Cross-Site Scripting | widget4call | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-21485 | Dash Framework - Cross-site Scripting | dash | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2024-33724 | SOPlanning 1.52.00 Cross Site Scripting | soplanning | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-48120 | X2CRM 8.5 - Stored Cross-Site Scripting (XSS) | x2crm | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390726 , 392647 |
| CVE-2024-52762 | Ganglia Web Interface (v3.7.3 - v3.7.6) - Cross-Site Scripting | ganglia-web | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-52763 | Ganglia Web Interface (v3.7.3 - v3.7.5) - Cross-Site Scripting | ganglia-web | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 347198 |
| CVE-2025-2610 | MagnusBilling Alarm Module - Cross-Site Scripting | magnusbilling | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2025-62780 | ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API | changedetection | Attack Blocked by Atomicorp | 346755 , 350148 |
| CVE-2026-11569 | Quay: quay: stored xss via filedrop svg upload | Red Hat Quay 3 | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-14864 | JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode | JetEngine | Attack Blocked by Atomicorp | 333140 , 340095 , 340147 , 342259 , 346755 |
| CVE-2026-15234 | Codeless Page Builder <= 1.1.4 - Contributor+ Stored XSS via Shortcode Attribute | Codeless Page Builder | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-15245 | BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode | BNE Testimonials | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-15262 | Admin Columns for ACF Fields <= 0.3.2 - Contributor+ Stored XSS via ACF Field Value Column | Admin Columns for ACF Fields | Attack Blocked by Atomicorp | 333141 , 340087 , 340095 , 340099 , 341099 , 341266 |
| CVE-2026-16063 | Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content | Event Booking Manager for WooCommerce | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16537 | Slick Slider < 0.5.3 - Contributor+ Stored XSS via Gallery Shortcode | Slick Slider | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16558 | YMC Filter < 3.12.8 - Contributor+ Stored XSS via Layout Builder Schema | YMC Filter | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-17010 | Saitama Addon Pack <= 1.0.8 - Contributor+ Stored XSS via Post Meta | Saitama Addon Pack | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-18395 | Child Pages Card < 1.09 - Contributor+ Stored XSS via Shortcode Attributes | Child Pages Card | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-26378 | koha Arbitrary Code Execution Vulnerability | koha | Attack Blocked by Atomicorp | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-34212 | Docmost page content has stored XSS via unsanitized attachment URLs | docmost | Attack Blocked by Atomicorp | 333140 |
| CVE-2026-34848 | hoppscotch: Stored XSS in team member overflow tooltip via display name | hoppscotch | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34974 | phpMyFAQ: SVG Sanitizer Bypass via HTML Entity Encoding leads to Stored XSS and Privilege Escalation | phpmyfaq | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35403 | LORIS has potential cross-site scripting in survey_accounts module | loris | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35455 | immich has Stored XSS via OCR Text in 360° Panorama Viewer | immich | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 341256 , 346755 |
| CVE-2026-36392 | FairSketch Rise CRM Version 3.9.6 Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-38473 | the subtitle deletion flow in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 Cross-Site Scripting Vulnerability | the subtitle deletion flow in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-38725 | xipblog module 2.0.1 and Earlier for PrestaShop Cross-Site Scripting Vulnerability | - | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-39380 | Open Source Point of Sale has Stored XSS in Stock Location (Configuration) | open source point of sale | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-39960 | MantisBT is Vulnerable to Stored XSS through Custom Field Textarea Values | mantisbt | Attack Blocked by Atomicorp | 333140 , 341256 |
| CVE-2026-39964 | TypeBot: Stored XSS via javascript: URI in text bubble links — bot author executes JS on visitors' browsers | typebot.io | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-45138 | CI4MS: Stored XSS in Blog Content via Broken html_purify Validation Rule | ci4ms | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-45580 | WWBN AVideo Live: stored XSS via unescaped stream key in modeYoutubeLive.php class attribute | avideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-45694 | LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters | librenms | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-72570 | cube-root directory-serve - Stored Cross-Site Scripting via Malicious Filename | directory-serve | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-72583 | fastschema - Stored Cross-Site Scripting via MIME Type Bypass in File Upload | fastschema | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-82396 | Sulu: Stored XSS via media download inline-disposition override | sulu | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-25731 | Zuz Music 2.1 Persistent Cross-site Scripting via zuzconsole Contact | Zuz Music | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2024-11587 | idcCMS V1.60 - Cross-Site Scripting | idccms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2024-33113 | D-LINK DIR-845L bsc_sms_inbox.php file - Information Disclosure | dir-845l | Attack Blocked by Atomicorp | 390722 |
| CVE-2024-9007 | 123Solar 1.8.4.5 - Cross-Site Scripting | 123solar | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-2127 | JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS | jux real estate | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-2709 | Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting | ufida erp-nc | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2025-2710 | Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting | ufida erp-nc | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-2711 | Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting | ufida erp-nc | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2025-2712 | Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting | ufida erp-nc | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2026-25860 | OpenClinic GA 5.351.19 Reflected XSS via DICOM Image Upload Handler | OpenClinic GA | Attack Blocked by Atomicorp | 333140 , 333141 |
| CVE-2026-35208 | lichess.org has an Unsanitized Stream Title Injection on /streamer | lila | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-41472 | CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard | cyberpanel | Attack Blocked by Atomicorp | 333140 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48094 | ShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared URL in Content Output | shareopenly | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-5808 | openstatusHQ openstatus Onboarding Endpoint client.tsx cross site scripting | openstatus | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-59232 | Stored Cross-site Scripting in Prospero Flow CRM lead name field | Prospero Flow CRM | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-69116 | FlyEnv < 4.18.0 Cross-Site Scripting via v-html | FlyEnv | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-73038 | NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name | NodeBB | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-73422 | Astro: Reflected XSS via unescaped View Transition animation properties | astro | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2026-73628 | Serendipity 2.3.5 Reflected XSS via search clean-URL route | Serendipity | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-76837 | Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name | Baserow | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-82451 | Formwork through 2.3.14 Stored XSS via Referer Header | Formwork | Attack Blocked by Atomicorp | 333140 , 333141 , 340003 , 340087 , 340095 , 340099 , 340147 , 340158 , 341099 , 341266 , 342259 |
| CVE-2026-82646 | WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.php | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-84191 | LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields | librenms | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-85158 | AVideo Reflected XSS via videoEmbeded.php link parameter | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-85159 | AVideo Reflected XSS via cancelUri in userLogin.php | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-85577 | AVideo userLogin.php Reflected XSS via error parameter | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-89240 | WWBN AVideo Reflected XSS via confirmLivePassword.php | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-89241 | WWBN AVideo Reflected XSS via confirmLivePassword.php | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-89244 | WWBN AVideo Reflected XSS via Gallery Category getBackURL | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2018-25248 | MyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.php | mybb downloads | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2018-25349 | userSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header | userSpice | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-25739 | GigToDo Freelance Marketplace Script 1.3 Persistent XSS | GigToDo | Attack Blocked by Atomicorp | 333140 , 333141 |
| CVE-2021-47931 | Exponent CMS 2.6 Multiple Vulnerabilities Stored XSS Authentication | Exponent CMS | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-47947 | Projectsend r1295 Stored Cross-Site Scripting via files-edit.php | Projectsend | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2021-47983 | WordPress Plugin Stripe Payments 2.0.39 Stored XSS via currency_code | Accept Stripe Payments | Attack Blocked by Atomicorp | 340095 , 346755 |
| CVE-2022-50943 | Moodle LMS 4.0 Cross-Site Scripting via course search.php | moodle | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-50948 | Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting | Motopress Hotel Booking Lite | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2022-50958 | WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php | Jetpack | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2022-50959 | WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php | Contact Form Builder | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2022-50960 | WordPress International Sms Contact Form 7 Integration 1.2 XSS | International Sms For Contact Form | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 |
| CVE-2022-50961 | WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS | IP2Location Country Blocker | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 346755 |
| CVE-2022-50962 | uBidAuction 2.0.1 myOrders Reflected XSS | uBidAuction | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-50963 | uBidAuction 2.0.1 myAuctions active Reflected XSS | uBidAuction | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-50964 | uBidAuction 2.0.1 myAuctions loose Reflected XSS | uBidAuction | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-50965 | uBidAuction 2.0.1 posts manage Reflected XSS | uBidAuction | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-50966 | uBidAuction 2.0.1 news manage Reflected XSS | uBidAuction | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-50968 | uBidAuction 2.0.1 auctions manage Reflected XSS | uBidAuction | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-50969 | uBidAuction 2.0.1 mailingLog manage Reflected XSS | uBidAuction | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-50970 | WordPress Plugin AAWP 3.16 Reflected XSS via tab Parameter | WordPress Plugin AAWP | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2025-34032 | Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting | jmol | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2025-34141 | ETQ Reliance - Reflected XSS via SQLConverterServlet | reliance | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 341099 , 342259 , 347198 |
| CVE-2025-41393 | Ricoh Web Image Monitor - Reflected XSS | Multiple laser printers and MFPs which implement Web Image Monitor | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2025-53533 | Pi-hole Reflected XSS in 404-Error Page | web interface | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2025-71404 | better-auth before 1.1.16 Reflected XSS via error parameter | better-auth | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-19434 | Stored Cross-site Scripting in Pentestify finding severity field | Pentestify | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-19716 | Stored Cross-site Scripting in Pentestify user account deletion via unescaped username | Pentestify | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-22675 | OCS Inventory NG Server Stored XSS via User-Agent | ocs inventory server | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-25557 | Evoluted PHP Directory Listing Script 4.0.5 Reflected XSS via dir parameter | PHP Directory Listing Script | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-27176 | MajorDoMo - Cross-Site Scripting | majordomo | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148 , 390501 |
| CVE-2026-32856 | Ellucian Banner Self-Service Reflected XSS via dateConverter | Banner Self-Service | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-34161 | Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution | chamilo lms | Attack Blocked by Atomicorp | 333140 |
| CVE-2026-34416 | OSCAL-GUI Reflected XSS via project parameter in oscal.php | OSCAL-GUI | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34417 | OSCAL-GUI Reflected XSS via project parameter in oscal-forms.php | OSCAL-GUI | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34798 | Endian Firewall /cgi-bin/routing.cgi remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34799 | Endian Firewall /manage/dnsmasq/hosts/ remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34800 | Endian Firewall /cgi-bin/uplinkeditor.cgi NAME Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-34801 | Endian Firewall /manage/dhcp/fixed_leases/ remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34802 | Endian Firewall /cgi-bin/salearn.cgi remark user ham spam Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34803 | Endian Firewall /manage/qos/classes/ name Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-34804 | Endian Firewall /manage/qos/rules/ dscp Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34805 | Endian Firewall /cgi-bin/dnat.cgi remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34806 | Endian Firewall /cgi-bin/snat.cgi remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34807 | Endian Firewall /cgi-bin/incoming.cgi remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34808 | Endian Firewall /cgi-bin/outgoingfw.cgi remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34809 | Endian Firewall /cgi-bin/zonefw.cgi remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34810 | Endian Firewall /cgi-bin/vpnfw.cgi remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34811 | Endian Firewall /cgi-bin/xtaccess.cgi remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34812 | Endian Firewall /cgi-bin/proxypolicy.cgi mimetypes Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34813 | Endian Firewall /cgi-bin/proxyuser.cgi user Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34814 | Endian Firewall /cgi-bin/proxygroup.cgi group Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34815 | Endian Firewall /cgi-bin/smtpdomains.cgi DOMAIN Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34816 | Endian Firewall /manage/smtpscan/domainrouting/ domain Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34817 | Endian Firewall /cgi-bin/smtprouting.cgi ADDRESS BCC Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34818 | Endian Firewall /manage/dnsmasq/localdomains/ remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34819 | Endian Firewall /cgi-bin/openvpnclient.cgi REMARK Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34820 | Endian Firewall /manage/ipsec/ remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34821 | Endian Firewall /manage/vpnauthentication/user/ remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34822 | Endian Firewall /manage/ca/certificate/ new_cert_name Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34823 | Endian Firewall /manage/password/web/ remark Stored Cross-Site Scripting | firewall community | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35007 | Open ISES Tickets < 3.44.2 Reflected XSS via single_unit.php id Parameter | tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35008 | Open ISES Tickets < 3.44.2 Reflected XSS via single.php ticket_id Parameter | tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35009 | Open ISES Tickets < 3.44.2 Reflected XSS via add_note.php ticket_id Parameter | tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35010 | Open ISES Tickets < 3.44.2 Reflected XSS via patient_JF.php ticket_id Parameter | tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35011 | Open ISES Tickets < 3.44.2 Reflected XSS via opena.php frm_call Parameter | tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35012 | Open ISES Tickets < 3.44.2 Reflected XSS via add_facnote.php ticket_id Parameter | tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35014 | Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter | tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35015 | Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.php the_ticket Parameter | tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-35016 | Open ISES Tickets < 3.44.2 Reflected XSS via search.php frm_query Parameter | tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-40507 | OpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portal | openemr | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-40508 | OpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import Handler | openemr | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-4093 | Stored XSS in Drupal 7 Term Reference Tree module (token display templates and term labels) | taxonomy term reference tree widget | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 |
| CVE-2026-41456 | Bludit CMS <= 3.20.0 - Cross-Site Scripting | bludit | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2026-42840 | ERPNext 16.16.0 - Stored XSS in POS customer section via unescaped template literals | ERPNext | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-45551 | Group-Office: Authenticated Stored XSS in Administrator Context via Arbitrary Cross-User Setting Write | groupoffice | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-47106 | Ellucian Banner Self-Service Stored XSS via getFacultyMeetingTimes API | Banner Self-Service | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48214 | Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48215 | Open ISES Tickets < 3.44.2 Reflected XSS via circle.php frm_id Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48218 | Open ISES Tickets < 3.44.2 Reflected XSS via icons/buttons/landb.php frm_name and frm_id Parameters | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48219 | Open ISES Tickets < 3.44.2 Reflected XSS via ics202.php frm_add_str Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48220 | Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48221 | Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48222 | Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48223 | Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48224 | Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48225 | Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48226 | Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48227 | Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48228 | Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48229 | Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter | Tickets | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48530 | GFI Archiver < 15.13 Stored XSS via CategorizationPolicyWizard.aspx | GFI Archiver | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48531 | GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx | GFI Archiver | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48532 | GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx | GFI Archiver | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48534 | GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx | GFI Archiver | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48535 | GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx | GFI Archiver | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48536 | GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx | GFI Archiver | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48537 | GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx | GFI Archiver | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48538 | GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx | GFI Archiver | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-48539 | GFI Archiver < 15.13 Stored XSS via MailInsights.aspx | GFI Archiver | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-48552 | Nagios Core / XI DOM-based XSS via jsonquery.js | Nagios Core | Attack Blocked by Atomicorp | 333140 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-48559 | Lightweight Music Server 3.76.0 Stored XSS via Media File Metadata Tags | lms | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-49131 | OPNsense < 26.1.9 Stored XSS via Firewall Rule Description Field | OPNsense | Attack Blocked by Atomicorp | 333140 , 333141 |
| CVE-2026-49132 | OPNsense < 26.1.9 Stored XSS via Certificate Description Field | OPNsense | Attack Blocked by Atomicorp | 333140 , 333141 |
| CVE-2026-50230 | Lyrion Music Server <= 9.2.0 - Cross-Site Scripting | Lyrion Music Server | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390716 |
| CVE-2026-53992 | Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date Parameters | ProjectSend | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-56126 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php | pfSense Plus | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-56127 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php | pfSense Plus | Attack Blocked by Atomicorp | 333140 , 333141 , 342259 |
| CVE-2026-56128 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php | pfSense Plus | Attack Blocked by Atomicorp | 333140 , 333141 , 342259 |
| CVE-2026-57857 | Flow Payment Plugin for WordPress Reflected Cross-Site Scripting via error_message Parameter | Flow Payment | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 346755 |
| CVE-2026-64628 | Grav Stored Cross-Site Scripting via Shortcode Attribute Handlers | grav | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-65697 | Fathom Lite 1.3.1 Stored XSS via /collect Endpoint | fathom | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-66296 | Reflected XSS in oaskit's default HTML error handler | oaskit | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-67333 | better-auth before 1.6.13 Stored XSS via javascript redirect_uri | better-auth | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-68583 | luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.name | luci | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-71503 | Dolibarr < 24.0.0 Reflected XSS via Extra Fields Administration Template | dolibarr | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-72743 | SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html | SQLBot | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-72747 | AVideo Stored Cross-Site Scripting via Unauthenticated Registration | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-72821 | Grav Form Plugin before 9.1.15 Stored XSS via Radio Toggle | grav | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-72832 | Grav before 2.0.12 Stored XSS via quoted-attribute bypass | grav | Attack Blocked by Atomicorp | 333140 , 333141 |
| CVE-2026-73319 | XenForo < 2.3.13 XSS via Dynamic Redirect Handler | xenforo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-74908 | Grav plugin-api before 1.0.15 Script Injection via SVG | grav | Attack Blocked by Atomicorp | 351000 |
| CVE-2026-75831 | Grav before 2.0.15 Stored XSS via audio/video source URL | grav | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-84477 | AVideo Stored XSS via Live Schedule Title Description | AVideo | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-85593 | phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode | phpMyFAQ | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-85600 | Grav Admin before 2.0.21 Stored XSS via username | grav-plugin-admin2 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 347198 , 350147 , 350148 |
| CVE-2026-85601 | Grav Admin before 2.0.20 Cross-Site Scripting via marked.js | grav | Attack Blocked by Atomicorp | 333140 |
| CVE-2026-86197 | Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox | grav | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2016-4807 | Web2py 2.14.5 - Multiple Vulnerabilities | web2py | Attack Blocked by Atomicorp | 344360 , 344364 , 344366 , 344370 |
| CVE-2017-14651 | WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting | api manager | Attack Blocked by Atomicorp | 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148 |
| CVE-2018-1000856 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2018-1002001 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | arigato autoresponder and newsletter | Attack Blocked by Atomicorp | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002002 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | arigato autoresponder and newsletter | Attack Blocked by Atomicorp | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002003 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | arigato autoresponder and newsletter | Attack Blocked by Atomicorp | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002004 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | arigato autoresponder and newsletter | Attack Blocked by Atomicorp | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002005 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | arigato autoresponder and newsletter | Attack Blocked by Atomicorp | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002006 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | arigato autoresponder and newsletter | Attack Blocked by Atomicorp | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002007 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | arigato autoresponder and newsletter | Attack Blocked by Atomicorp | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002008 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | arigato autoresponder and newsletter | Attack Blocked by Atomicorp | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002009 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | arigato autoresponder and newsletter | Attack Blocked by Atomicorp | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1186 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | emc isilon | Attack Blocked by Atomicorp | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1187 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | emc isilon | Attack Blocked by Atomicorp | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1188 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | emc isilon | Attack Blocked by Atomicorp | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1189 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | emc isilon | Attack Blocked by Atomicorp | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1201 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | emc isilon | Attack Blocked by Atomicorp | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1202 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | emc isilon | Attack Blocked by Atomicorp | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-19749 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2018-19751 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 , 350148 |
| CVE-2018-19752 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2018-19892 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 , 350148 |
| CVE-2018-19914 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2018-19915 | DomainMOD <=4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2018-20009 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2018-20010 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2018-20011 | DomainMOD 4.11.01 - Cross-Site Scripting | domainmod | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 , 350148 |
| CVE-2018-20418 | Craft CMS 3.0.25 - Cross-Site Scripting | craft cms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 344365 , 346755 |
| CVE-2019-15829 | Gallery Photoblocks < 1.1.43 - Cross-Site Scripting | gallery photoblocks | Attack Blocked by Atomicorp | 346755 , 347198 |
| CVE-2019-19742 | D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting | dir-615 firmware | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 344370 , 350147 |
| CVE-2020-29240 | LEPTON CMS 4.7.0 - 'URL' Persistent Cross-Site Scripting | leptoncms | Attack Blocked by Atomicorp | 333141 , 340149 , 341256 , 342259 , 346755 , 398005 |
| CVE-2020-29470 | OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting | opencart | Attack Blocked by Atomicorp | 340247 , 340248 , 340476 , 340477 , 341245 , 342259 , 346755 , 390585 |
| CVE-2020-29475 | nopCommerce Store 4.30 - 'name' Stored Cross-Site Scripting | store | Attack Blocked by Atomicorp | 346755 |
| CVE-2020-29477 | Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting | community | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 346755 , 390585 |
| CVE-2020-35241 | Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting | flatpress | Attack Blocked by Atomicorp | 344370 , 346755 , 390724 |
| CVE-2020-9314 | Oracle iPlanet Web Server 7.0.x - Image Injection | iplanet web server | Attack Blocked by Atomicorp | 340162 , 340163 |
| CVE-2021-24681 | Duplicate Page WordPress - Stored Cross-Site Scripting | duplicate page | Detected by Atomicorp | 377360 |
| CVE-2021-24991 | WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting | woocommerce pdf invoices& packing slips | Attack Blocked by Atomicorp | 347198 |
| CVE-2021-46068 | Vehicle Service Management System - Stored Cross-Site Scripting | vehicle service management system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-46069 | Vehicle Service Management System 1.0 - Stored Cross Site Scripting | vehicle service management system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2021-46071 | ehicle Service Management System 1.0 - Cross-Site Scripting | vehicle service management system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-46072 | Vehicle Service Management System 1.0 - Stored Cross Site Scripting | vehicle service management system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2021-46073 | Vehicle Service Management System 1.0 - Cross Site Scripting | vehicle service management system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-0535 | WordPress E2Pdf <1.16.45 - Cross-Site Scripting | e2pdf | Detected by Atomicorp | 377360 |
| CVE-2022-0873 | WordPress Gmedia Photo Gallery Plugin < 1.20.0 - Cross-Site Scripting | gmedia gallery | Detected by Atomicorp | 377360 |
| CVE-2022-1029 | Limit Login Attempts - Stored Cross-Site Scripting | limit login attempts | Detected by Atomicorp | 377360 |
| CVE-2023-0563 | Bank Locker Management System - Cross-Site Scripting | bank locker management system | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-2009 | Pretty Url <= 1.5.4 - Cross-Site Scripting | pretty url | Detected by Atomicorp | 377360 |
| CVE-2023-2224 | Seo By 10Web < 1.2.7 - Cross-Site Scripting | seo | Detected by Atomicorp | 377360 |
| CVE-2023-27624 | WordPress Redirect After Login <= 0.1.9 - Admin Stored XSS | redirect after login | Attack Blocked by Atomicorp | 346755 |
| CVE-2023-3184 | Sales Tracker Management System v1.0 - Multiple Vulnerabilities | sales tracker management system | Detected by Atomicorp | 345493 |
| CVE-2024-11921 | Give WP Plugin < 3.19.0 - Cross-Site Scripting | givewp | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2024-3822 | Base64 Encoder/Decoder <= 0.9.2 - Reflected XSS | base64 encoderdecoder | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-50857 | GestioIP - Reflected Cross-Site Scripting | gestioip | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2025-15669 | Bit Form < 3.1.4 - Admin+ Stored XSS via Conversational Form Progress Label | Bit Form | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2025-51990 | XWiki – Stored Cross-Site Scripting (XSS) | xwiki | Attack Blocked by Atomicorp | 342259 |
| CVE-2026-14203 | Smart Manager < 8.92.0 - Contributor+ Stored XSS via Post Title | Smart Manager | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 |
| CVE-2026-15233 | Nested Pages < 3.2.15 - Editor+ Stored XSS via Post Title | Nested Pages | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 |
| CVE-2026-26211 | Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field | Ekushey Project Manager CRM | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-39390 | CI4MS has Stored XSS via srcdoc attribute bypass in Google Maps iframe setting | ci4ms | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-39392 | CI4MS has Stored XSS in Pages Content Due to Missing html_purify Sanitization | ci4ms | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-46516 | Frogman vulnerable to stored XSS in chat console formatter (escalation vector in multi-admin deployments) | frogman | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2026-65930 | LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields | LimeSurvey | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 342259 |
| CVE-2026-67612 | OpenEMR 8.2.0 Stored XSS via import_template.php Template Management | openemr | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-67617 | Microweber CMS 2.0.20 Stored XSS via tag_names Parameter | microweber | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-70560 | Ultimate POS Stored XSS via First Name Field in Leave Notifications | Ultimate POS (Stock Management & Point of Sale) | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-79663 | Ech0 before 4.7.3 Stored XSS via RSS feed tag names | Ech0 | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-84188 | librenms before 26.7.0 Stored XSS via graph_descr settings | librenms | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9577 | Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter | Post Status Notifier Lite | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2023-45671 | Frigate < 0.13.0 Beta 3 - Cross-Site Scripting | frigate | Attack Blocked by Atomicorp | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2024-13627 | OWL Carousel Slider - Cross-Site Scripting | owl carousel slider | Attack Blocked by Atomicorp | 341266 , 346755 , 377360 |
| CVE-2024-24050 | Workout Journal App 1.0 - Stored XSS | workout journal app | Attack Blocked by Atomicorp | 333140 , 340147 , 340148 , 341256 , 342259 , 345493 , 346755 , 380026 , 390727 , 392301 , 392648 |
| CVE-2026-3093 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | gitlab | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16273 | Narrative Publisher <= 1.0.7 - Contributor+ Stored XSS via narrative_post_script Post Meta | Narrative Publisher | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 346755 , 350147 , 350148 |
| CVE-2026-53468 | Typemill has Stored HTML Attribute Injection in Metadata Fields | typemill | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-0743 | WP Content Permission <= 1.2 - Cross-Site Scripting | WP Content Permission | Attack Blocked by Atomicorp | 346755 , 377360 , 390585 |
| CVE-2007-5728 | phpPgAdmin <=4.1.1 - Cross-Site Scripting | phppgadmin | Attack Blocked by Atomicorp | 340147 , 341266 , 346755 |
| CVE-2008-1061 | WordPress Sniplets <=1.2.2 - Cross-Site Scripting | sniplets plugin | Attack Blocked by Atomicorp | 340147 , 341266 |
| CVE-2008-2398 | AppServ Open Project <=2.5.10 - Cross-Site Scripting | appserv | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 |
| CVE-2008-6465 | Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting | h-sphere | Attack Blocked by Atomicorp | 333141 , 340149 , 342259 , 346755 , 347198 , 360030 |
| CVE-2008-6982 | Devalcms 1.4a - Cross-Site Scripting | devalcms | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2009-1872 | Adobe Coldfusion <=8.0.1 - Cross-Site Scripting | coldfusion | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2011-4618 | Advanced Text Widget < 2.0.2 - Cross-Site Scripting | advanced text widget plugin | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2011-4624 | GRAND FlAGallery 1.57 - Cross-Site Scripting | grand flagallery | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2011-4926 | Adminimize 1.7.22 - Cross-Site Scripting | adminimize | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2011-5106 | WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting | flexible custom post type | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2011-5107 | Alert Before Your Post <= 0.1.1 - Cross-Site Scripting | alert before you post | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2011-5179 | Skysa App Bar 1.04 - Cross-Site Scripting | skysa app bar integration plugin | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2011-5181 | ClickDesk Live Support Live Chat 2.0 - Cross-Site Scripting | clickdesk live support-live chat plugin | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2011-5265 | Featurific For WordPress 1.6.2 - Cross-Site Scripting | featurific-for-wordpress | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2012-0285 | stoneware webnetwork6 - Multiple Vulnerabilities | webnetwork | Attack Blocked by Atomicorp | 390726 , 392301 , 392647 , 392648 |
| CVE-2012-0782 | WordPress Core 3.3.1 - Multiple Vulnerabilities | WordPress | Attack Blocked by Atomicorp | 340147 , 340148 , 344370 , 346755 , 381209 , 381210 , 390727 , 392301 , 392648 |
| CVE-2012-0901 | YouSayToo auto-publishing 1.0 - Cross-Site Scripting | yousaytoo | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2012-1835 | WordPress Plugin All-in-One Event Calendar 1.4 - Cross-Site Scripting | all-in-one event calendar | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2012-2371 | WP-FaceThumb 0.1 - Cross-Site Scripting | wp-facethumb | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2012-4242 | WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting | mf gig calendar | Attack Blocked by Atomicorp | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2012-4273 | 2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting | 2-click-social-media-buttons | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2012-4547 | AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting | awstats | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2012-4768 | WordPress Plugin Download Monitor < 3.3.5.9 - Cross-Site Scripting | download monitor | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2012-4889 | ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting | firewall analyzer | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2012-5684 | ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset | zpanel | Attack Blocked by Atomicorp | 340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704 |
| CVE-2012-5913 | WordPress Integrator 1.32 - Cross-Site Scripting | wordpress integrator | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2013-2287 | WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting | uploader | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2013-2643 | Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities | web appliance firmware | Attack Blocked by Atomicorp | 344362 , 344364 , 344366 |
| CVE-2013-3526 | WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting | trafficanalyzer | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 |
| CVE-2013-4117 | WordPress Plugin Category Grid View Gallery 2.3.1 - Cross-Site Scripting | category-grid-view-gallery | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2013-4625 | WordPress Plugin Duplicator < 0.4.5 - Cross-Site Scripting | duplicator | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2013-6042 | Webuzo 2.1.3 - Multiple Vulnerabilities | webuzo | Attack Blocked by Atomicorp | 333140 , 333141 , 340149 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 350148 , 390726 , 392647 |
| CVE-2013-6281 | WordPress Spreadsheet - Cross-Site Scripting | dhtmlxspreadsheet | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2014-0870 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | algo credit limits | Attack Blocked by Atomicorp | 392301 |
| CVE-2014-100004 | Sitecore CMS - Cross-Site Scripting | sitecore.net | Attack Blocked by Atomicorp | 333141 , 347198 |
| CVE-2014-1944 | Ilch CMS 2.0 - Persistent Cross-Site Scripting | ilch cms | Attack Blocked by Atomicorp | 344370 |
| CVE-2014-2908 | Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting | simatic s7 cpu 1200 firmware | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2014-3110 | Honeywell XL Web Controller - Cross-Site Scripting | falcon xlweb linux controller | Attack Blocked by Atomicorp | 333141 , 340156 , 341245 , 341256 , 342259 , 346755 , 390724 |
| CVE-2014-4513 | ActiveHelper LiveHelp Server 3.1.0 - Cross-Site Scripting | activehelper livehelp live chat | Attack Blocked by Atomicorp | 333140 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2014-9094 | WordPress DZS-VideoGallery Plugin Cross-Site Scripting | video gallery | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2014-9146 | Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities | fiyo cms | Attack Blocked by Atomicorp | 340007 , 340156 , 341145 , 344360 , 380026 , 380122 , 390709 , 390720 , 390726 , 392647 |
| CVE-2014-9444 | Frontend Uploader <= 0.9.2 - Cross-Site Scripting | frontend uploader | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 |
| CVE-2015-1389 | Aruba ClearPass Policy Manager - Persistent Cross-Site Scripting | clearpass policy manager | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2015-1880 | Fortinet FortiOS <=5.2.3 - Cross-Site Scripting | fortios | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2015-2068 | Magento Server Mass Importer - Cross-Site Scripting | magmi | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 |
| CVE-2015-2275 | WoltLab Community Gallery - Persistent Cross-Site Scripting | community gallery | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 344365 , 344370 , 346755 , 390726 , 392647 |
| CVE-2015-2807 | Navis DocumentCloud <0.1.1 - Cross-Site Scripting | navis documentcloud | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 348476 , 350147 , 350148 |
| CVE-2015-4127 | WordPress Church Admin <0.810 - Cross-Site Scripting | church admin | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2015-4420 | Opsview 4.6.2 - Multiple Cross-Site Scripting Vulnerabilities | opsview | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2015-4665 | Xceedium Xsuite - Multiple Vulnerabilities | xsuite | Attack Blocked by Atomicorp | 320464 , 320465 , 333141 , 340023 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 347198 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2015-6402 | Cisco EPC 3928 - Multiple Vulnerabilities | epc3928 docsis 3.0 8x4 wireless residential gateway with embedded digital voice adapter | Attack Blocked by Atomicorp | 333141 , 340147 , 340148 , 340149 , 341256 , 342259 , 344363 , 346755 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2015-6920 | WordPress sourceAFRICA <=0.1.3 - Cross-Site Scripting | sourceafrica | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 348476 , 350147 , 350148 |
| CVE-2020-7318 | McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting | epolicy orchestrator | Attack Blocked by Atomicorp | 333141 , 341256 , 342259 , 346755 , 347198 |
| CVE-2021-42663 | Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting | online event booking and reservation system | Attack Blocked by Atomicorp | 340147 , 341266 , 342259 |
| CVE-2024-34061 | Changedetection.io <=v0.45.21 - Cross-Site Scripting | changedetection.io | Attack Blocked by Atomicorp | 333141 , 340130 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2024-4348 | osCommerce v4.0 - Cross-site Scripting | oscommerce | Attack Blocked by Atomicorp | 340147 , 340148 , 342259 , 350147 , 350148 |
| CVE-2025-41228 | VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS) | vCenter Server | Attack Blocked by Atomicorp | 340003 , 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 , 390727 , 392301 , 392648 |
| CVE-2026-32250 | NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/queries/user/ | Nameless | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-36239 | PbootCMS v.3.2.11 Cross-site Scripting Vulnerability | PbootCMS v.3.2.11 | Attack Blocked by Atomicorp | 340014 , 340023 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 |
| CVE-2026-55566 | Yamcs: DOM XSS in Extension Routing | yamcs | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-55592 | Dashy <= 4.3.6 - Reflected XSS via Workspace | dashy | Attack Blocked by Atomicorp | 340112 , 346755 , 350148 |
| CVE-2010-4275 | Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities | radius manager | Attack Blocked by Atomicorp | 346755 |
| CVE-2015-4063 | NewStatPress <0.9.9 - Cross-Site Scripting | newstatpress | Attack Blocked by Atomicorp | 341266 , 346755 |
| CVE-2025-15677 | GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories | GeoDirectory | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-13393 | ElementsKit Lite < 3.10.01 - Subsite Administrator+ Stored XSS via Megamenu Menu-Item Settings (Multisite) | ElementsKit Elementor Addons | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-9060 | Agile Store Locator < 1.6.6 - Admin+ Stored XSS via map_style | Store Locator WordPress | Attack Blocked by Atomicorp | 346755 |
| CVE-2026-9061 | Agile Store Locator < 1.6.9 - Admin+ Stored XSS via logo_name | Store Locator WordPress | Attack Blocked by Atomicorp | 340087 , 340099 , 341099 , 341266 , 346755 |
| CVE-2025-0133 | PAN-OS - Reflected Cross-Site Scripting | PAN-OS | Attack Blocked by Atomicorp | 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 |
| CVE-2026-66300 | SNOMED International Snowstorm reflected XSS | Snowstorm | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10153 | westboy CicadasCMS AbstractCacheManager.java search cross site scripting | CicadasCMS | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10173 | Orthanc Explorer 2 URL StudyList.vue cross site scripting | Explorer 2 | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10289 | code-projects Hotel and Tourism Reservation System tour.php cross site scripting | Hotel and Tourism Reservation System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10301 | itsourcecode Fees Management System index.php cross site scripting | Fees Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-10810 | itsourcecode Fees Management System navbar.php cross site scripting | Fees Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-11436 | Mage AI Sign-in Flow index.tsx useMutation cross site scripting | Mage AI | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-11512 | itsourcecode Hospital Management System billing.php cross site scripting | Hospital Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-11518 | SourceCodester Inventory System User Management users.php cross site scripting | Inventory System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 380106 |
| CVE-2026-16220 | code-projects Online Examination System account.php cross site scripting | Online Examination System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16229 | itsourcecode Courier Management System index.php cross site scripting | Courier Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-16485 | SourceCodester Class and Exam Timetabling System class.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16486 | SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-18968 | ttttonyhe OBlog tags.php cross site scripting | OBlog | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-19378 | code-projects Task Management System CommentSave.php cross site scripting | Task Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-19998 | code-projects Online Shopping System offersmail.php cross site scripting | Online Shopping System | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 346755 |
| CVE-2026-5825 | code-projects Simple Laundry System delmemberinfo.php cross site scripting | Simple Laundry System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-5826 | code-projects Simple IT Discussion Forum edit-category.php cross site scripting | Simple IT Discussion Forum | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-59727 | Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands | astro | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-66882 | Reflected XSS in AshAuthentication confirmation and magic link interaction forms | ash authentication | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-75077 | SourceCodester Class and Exam Timetabling System BSCE2.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-75078 | SourceCodester Class and Exam Timetabling System BSHRM1.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-78054 | SourceCodester Class and Exam Timetabling System BSIS1.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-78055 | SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-78059 | SourceCodester Stock Management System printOrder.php cross site scripting | Stock Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-78060 | SourceCodester Stock Management System getOrderReport.php cross site scripting | Stock Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-79793 | code-projects Online Shopping System sumit_form.php cross site scripting | Online Shopping System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-82601 | SeaCMS err.php cross site scripting | SeaCMS | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340099 , 340147 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-82625 | code-projects Simple Inventory System User Registration register.php cross site scripting | Simple Inventory System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-82664 | yaojingang GEOFlow JSON-LD Theme HomeController.php cross site scripting | GEOFlow | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-82700 | code-projects Online Shopping System Newsletter Subscription offersmail.php cross site scripting | Online Shopping System | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 341256 , 346755 |
| CVE-2026-85021 | langgenius dify Splash Layout splash.tsx router.replace cross site scripting | dify | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-85382 | light0011 cms Chapter Content Output oneChapter.tpl htmlspecialchars_decode cross site scripting | cms | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-86216 | code-projects Hotel and Tourism Reservation in PHP details.php cross site scripting | Hotel and Tourism Reservation in PHP | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-86244 | FastAdmin User Controller User.php login cross site scripting | FastAdmin | Attack Blocked by Atomicorp | 333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-86278 | SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting | Syllabus-Aligned Learning Management & Examination System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-86294 | SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting | Simple Traffic Offense System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 342259 |
| CVE-2026-86668 | aircheng-org iWebShop-5 pic.php uploadFile cross site scripting | iWebShop-5 | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-87926 | Rizwan17 inventory-management-system Login Page index.php cross site scripting | inventory-management-system | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-9415 | code-projects Employee Management System eloginwel.php cross site scripting | Employee Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9416 | code-projects Employee Management System myprofile.php cross site scripting | Employee Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9417 | code-projects Employee Management System myprofileup.php cross site scripting | Employee Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9418 | code-projects Employee Management System changepassemp.php cross site scripting | Employee Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9419 | code-projects Employee Management System empproject.php cross site scripting | Employee Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9448 | code-projects Employee Management System applyleave.php cross site scripting | Employee Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9518 | hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting | CodeIgniter-StudentManagementSystem | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9519 | stonith404 pingvin-share Sign-in Auto-Redirect signIn.tsx getServerSideProps cross site scripting | pingvin-share | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9520 | blitz-js blitz Sign-in LoginForm.tsx cross site scripting | blitz | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-9527 | itsourcecode Electronic Judging System judges.php cross site scripting | Electronic Judging System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9566 | teableio teable Sign-up LoginPage.tsx cross site scripting | teable | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10228 | raisulislamg4 student_management_system_by_php admission_form_check.php cross site scripting | student management system by php | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10234 | Mettle sendportal Campaign webview cross site scripting | sendportal | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10244 | SourceCodester Pharmacy Sales and Inventory System main create_medicine_name cross site scripting | Pharmacy Sales and Inventory System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10245 | SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scripting | Pharmacy Sales and Inventory System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10246 | SourceCodester Pharmacy Sales and Inventory System main create_medicine_presentation cross site scripting | Pharmacy Sales and Inventory System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10247 | SourceCodester Pharmacy Sales and Inventory System main create_generic_name cross site scripting | Pharmacy Sales and Inventory System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10567 | 1Panel-dev CordysCRM ModuleFormController ModuleFormService.java save cross site scripting | CordysCRM | Attack Blocked by Atomicorp | 333140 , 333141 |
| CVE-2026-16155 | SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16156 | SourceCodester Class and Exam Timetabling System forexam.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16202 | SourceCodester Class and Exam Timetabling System CYS.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16203 | SourceCodester Class and Exam Timetabling System forCYS.php cross site scripting | Class and Exam Timetabling System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-19209 | SourceCodester Photo Share Website index.php home cross site scripting | Photo Share Website | Attack Blocked by Atomicorp | 333140 , 333141 , 340147 , 340148 , 342259 , 350147 , 350148 |
| CVE-2026-19922 | code-projects Online Shopping System checkout.php cross site scripting | Online Shopping System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-5806 | code-projects Easy Blog Site update.php cross site scripting | Easy Blog Site | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 342259 |
| CVE-2026-5810 | SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting | Sales and Inventory System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-7222 | code-projects Coaching Management System Complaint Form complaint.php cross site scripting | Coaching Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-8139 | Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName | concrete cms | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-82483 | coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting | Coppermine Photo Gallery | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-82488 | Beetel 450TC3 User Management cross site scripting | 450TC3 | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-82622 | code-projects Employee Leave Managing System Employee Profile Update editaction.php cross site scripting | Employee Leave Managing System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-84437 | OpenCart Autocomplete Workflow address.php cross site scripting | OpenCart | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 340247 , 340248 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-84438 | OpenCart Autocomplete Workflow edit.php cross site scripting | OpenCart | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-85022 | langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting | dify | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-85207 | itsourcecode Online Medicine Delivery System index.php cross site scripting | Online Medicine Delivery System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-86181 | code-projects Task Management System User Profile Update UpdateUserProfile.php cross site scripting | Task Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-86301 | code-projects Hospital Information System Patient Management editPatient.php cross site scripting | Hospital Information System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-86644 | star7th showdoc API Page Save Endpoint editormd.js cross site scripting | showdoc | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-10112 | sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting | STUDENT-MANAGEMENT-SYSTEM | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-10514 | 1Panel-dev CordysCRM RequestParamTrimConfig.java cross site scripting | CordysCRM | Attack Blocked by Atomicorp | 333140 |
| CVE-2026-10529 | westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scripting | CicadasCMS | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 344370 , 346755 , 350147 , 350148 |
| CVE-2026-11434 | FluentCMS Blocks Plugin blocks cross site scripting | FluentCMS | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-11468 | SourceCodester Hospitals Patient Records Management System page room_types cross site scripting | Hospitals Patient Records Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-16205 | Pluck CMS Albums albums.admin.php htmlspecialchars_decode cross site scripting | CMS | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-19110 | DataGear Chart Name HtmlTplDashboardWidgetHtmlRenderer.java HtmlTplDashboardWidgetHtmlRenderer cross site scripting | DataGear | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-19207 | PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting | Company Visitor Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-5834 | code-projects Online Shoe Store admin_running.php cross site scripting | Online Shoe Store | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-5835 | code-projects Online Shoe Store admin_football.php cross site scripting | Online Shoe Store | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-5836 | code-projects Online Shoe Store admin_product.php cross site scripting | Online Shoe Store | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341266 , 342259 |
| CVE-2026-9564 | SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting | Hospitals Patient Records Management System | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-9608 | QianFox FoxCMS Administrator Backend edit cross site scripting | FoxCMS | Attack Blocked by Atomicorp | 340095 , 346755 |
| CVE-2026-78187 | Piwigo Public Authentication cross site scripting | Piwigo | Attack Blocked by Atomicorp | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
Associated Atomicorp WAF Rules
| Rule | Status | Behavior |
|---|---|---|
| 300002 | Active | disruptive (deny) |
| 300013 | Active | disruptive (deny) |
| 300026 | Active | disruptive (deny) |
| 312863 | Active | disruptive (deny) |
| 320464 | Active | disruptive (deny) |
| 320465 | Active | disruptive (deny) |
| 322100 | Active | disruptive (deny) |
| 330708 | Active | disruptive (deny) |
| 330791 | Active | disruptive (deny) |
| 331028 | Active | disruptive (deny) |
| 331702 | Active | disruptive (deny) |
| 333140 | Active | disruptive (deny) |
| 333141 | Active | disruptive (deny) |
| 334168 | Active | disruptive (deny) |
| 337209 | Active | disruptive (deny) |
| 337210 | Active | disruptive (deny) |
| 337211 | Active | disruptive (deny) |
| 340003 | Active | disruptive (deny) |
| 340007 | Active | disruptive (deny) |
| 340014 | Active | disruptive (deny) |
| 340016 | Active | disruptive (deny) |
| 340017 | Active | disruptive (deny) |
| 340023 | Active | disruptive (deny) |
| 340029 | Active | disruptive (deny) |
| 340087 | Active | disruptive (deny) |
| 340095 | Active | disruptive (deny) |
| 340099 | Active | disruptive (deny) |
| 340112 | Active | disruptive (deny) |
| 340113 | Active | disruptive (deny) |
| 340130 | Active | disruptive (deny) |
| 340144 | Active | disruptive (deny) |
| 340145 | Active | disruptive (deny) |
| 340147 | Active | disruptive (deny) |
| 340148 | Active | disruptive (deny) |
| 340149 | Active | disruptive (deny) |
| 340152 | Active | disruptive (deny) |
| 340155 | Active | disruptive (deny) |
| 340156 | Active | disruptive (deny) |
| 340157 | Active | disruptive (deny) |
| 340158 | Active | disruptive (deny) |
| 340159 | Active | disruptive (deny) |
| 340162 | Active | disruptive (deny) |
| 340163 | Active | disruptive (deny) |
| 340165 | Active | disruptive (deny) |
| 340247 | Active | disruptive (deny) |
| 340248 | Active | disruptive (deny) |
| 340476 | Active | disruptive (deny) |
| 340477 | Active | disruptive (deny) |
| 341099 | Active | disruptive (deny) |
| 341145 | Active | disruptive (deny) |
| 341155 | Active | disruptive (deny) |
| 341245 | Active | disruptive (deny) |
| 341256 | Active | disruptive (deny) |
| 341258 | Active | disruptive (deny) |
| 341266 | Active | disruptive (deny) |
| 342259 | Active | disruptive (deny) |
| 344360 | Active | disruptive (deny) |
| 344361 | Active | disruptive (deny) |
| 344362 | Active | disruptive (deny) |
| 344363 | Active | disruptive (deny) |
| 344364 | Active | disruptive (deny) |
| 344365 | Active | disruptive (deny) |
| 344366 | Active | disruptive (deny) |
| 344370 | Active | disruptive (deny) |
| 344372 | Active | disruptive (deny) |
| 345493 | Active | non-disruptive (pass) |
| 346755 | Active | disruptive (deny) |
| 347009 | Active | disruptive (deny) |
| 347198 | Active | disruptive (deny) |
| 348476 | Active | disruptive (deny) |
| 350147 | Active | disruptive (deny) |
| 350148 | Active | disruptive (deny) |
| 351000 | Active | disruptive (deny) |
| 360030 | Active | disruptive (deny) |
| 360147 | Active | disruptive (deny) |
| 360148 | Active | disruptive (deny) |
| 360151 | Active | disruptive (deny) |
| 360153 | Active | disruptive (deny) |
| 377360 | Active | non-disruptive (pass) |
| 380026 | Active | disruptive (deny) |
| 380106 | Active | disruptive (deny) |
| 380122 | Active | disruptive (deny) |
| 381209 | Active | disruptive (deny) |
| 381210 | Active | disruptive (deny) |
| 390501 | Active | disruptive (deny) |
| 390572 | Active | disruptive (deny) |
| 390585 | Active | disruptive (deny) |
| 390703 | Active | disruptive (deny) |
| 390704 | Active | disruptive (deny) |
| 390709 | Active | disruptive (deny) |
| 390712 | Active | disruptive (deny) |
| 390714 | Active | disruptive (deny) |
| 390716 | Active | disruptive (deny) |
| 390720 | Active | disruptive (deny) |
| 390722 | Active | disruptive (deny) |
| 390724 | Active | disruptive (deny) |
| 390726 | Active | disruptive (deny) |
| 390727 | Active | disruptive (deny) |
| 390904 | Active | disruptive (deny) |
| 391213 | Active | disruptive (deny) |
| 392301 | Active | disruptive (deny) |
| 392647 | Active | disruptive (deny) |
| 392648 | Active | disruptive (deny) |
| 393655 | Active | disruptive (deny) |
| 393749 | Active | disruptive (deny) |
| 398005 | Active | non-disruptive (pass) |
Related MITRE CAPEC Context
MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims:
CAPEC-209 (opens in a new tab) , CAPEC-588 (opens in a new tab) , CAPEC-591 (opens in a new tab) , CAPEC-592 (opens in a new tab) , CAPEC-63 (opens in a new tab) , CAPEC-85 (opens in a new tab)