Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.485 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: xss

Displaying 1 - 25 results out of 2031

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
WordPress Tag Groups < 2.2.0 - Reflected Cross-Site Scripting CVE-2026-9833	Network Scanner	Oct 13, 2026	High(7.1)	0.01	0.2	No
Yamcs <=5.8.6 - Cross-Site Scripting CVE-2026-55549	Network Scanner	Sep 19, 2026	Medium(6.5)	0.02	0.7	No
Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting CVE-2026-58191	Network Scanner	Sep 15, 2026	Medium(6.5)	0.01	0.46	No
Bludit CMS <= 3.20.0 - Cross-Site Scripting CVE-2026-41456	Network Scanner	Sep 11, 2026	Medium(6.1)	0.03	0.86	No
Shield Security <= 21.0.8 - Unauthenticated Reflected XSS CVE-2026-0561	Network Scanner	Sep 7, 2026	Medium(6.1)	0.01	0.48	No
GeoNetwork - Reflected Cross-Site Scripting CVE-2026-57582	Network Scanner	Sep 2, 2026	High(8.2)	N/A	N/A	No
Mailcow Dockerized Swagger UI - Cross-Site Scripting CVE-2022-39258	Network Scanner	Aug 31, 2026	Medium(6.1)	0.02	0.79	No
WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site Scripting CVE-2026-49069	Network Scanner	Aug 20, 2026	High(7.1)	0.01	0.6	No
parisneo/lollms < 2.2.0 - Authenticated Stored XSS CVE-2026-1115	Network Scanner	Aug 18, 2026	Critical(9)	0.02	0.69	No
Temenos Transact - Cross-Site Scripting	Network Scanner	Aug 17, 2026	High	N/A	N/A	No
WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell) CVE-2026-64638	Network Scanner	Aug 10, 2026	High(8.9)	0.01	0.59	No
YesWiki Archived Revision - Cross-Site Scripting CVE-2026-52773	Network Scanner	Jul 22, 2026	Medium(6.1)	0.01	0.47	No
Apache Tomcat - Cross-Site Scripting CVE-2026-50229	Network Scanner	Jul 14, 2026	Medium(6.1)	0.05	0.91	No
YesWiki Bazar Widget - Reflected XSS via 'id' Parameter CVE-2026-52774	Network Scanner	Jul 13, 2026	Medium(6.1)	0.01	0.51	No
Dashy <= 4.3.6 - Reflected XSS via Workspace CVE-2026-55592	Network Scanner	Jun 22, 2026	Medium(6.1)	0.01	0.2	No
DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting CVE-2025-61224	Network Scanner	Jun 17, 2026	Medium(6.1)	0.02	0.73	No
Lyrion Music Server <= 9.2.0 - Cross-Site Scripting CVE-2026-50230	Network Scanner	Jun 15, 2026	Medium(6.1)	0.01	0.44	No
Label Studio < 1.18.0 - Reflected XSS CVE-2025-47783	Network Scanner	Jun 4, 2026	Medium(6.1)	0.01	0.47	No
YesWiki - Cross-Site Scripting	Network Scanner	Jun 3, 2026	High	N/A	N/A	No
PHPJabbers Event Booking Calendar - Reflected XSS	Network Scanner	May 18, 2026	Medium	N/A	N/A	No
WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSS	Network Scanner	May 15, 2026	High	N/A	N/A	No
MajorDoMo - Cross-Site Scripting CVE-2026-27176	Network Scanner	May 5, 2026	Medium(6.1)	0.01	0.48	No
XWiki - Cross-Site Scripting CVE-2026-40105	Network Scanner	May 5, 2026	Medium(6.1)	0.01	0.55	No
MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting CVE-2017-6478	Network Scanner	Apr 30, 2026	Medium(6.1)	0.03	0.85	No
RosarioSIS 6.7.2 - Cross-Site Scripting CVE-2020-15718	Network Scanner	Apr 29, 2026	Medium(6.1)	0.07	0.94	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove