Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.192 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: Cross-site scripting

Displaying 1 - 25 results out of 2828

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting CVE-2021-47795	Network Scanner	Jul 23, 2026	Medium(6.2)	0.03	0.84	No
YesWiki Archived Revision - Cross-Site Scripting CVE-2026-52773	Network Scanner	Jul 22, 2026	Medium(6.1)	0.01	0.1	No
Apache Tomcat - Cross-Site Scripting CVE-2026-50229	Network Scanner	Jul 14, 2026	Medium(6.1)	0.05	0.91	No
Dashy <= 4.3.6 - Reflected XSS via Workspace CVE-2026-55592	Network Scanner	Jun 22, 2026	Medium(6.1)	0.01	0.17	No
DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting CVE-2025-61224	Network Scanner	Jun 17, 2026	Medium(6.1)	0.02	0.69	No
Lyrion Music Server <= 9.2.0 - Cross-Site Scripting CVE-2026-50230	Network Scanner	Jun 15, 2026	Medium(6.1)	0.01	0.34	No
Label Studio < 1.16.0 - Cross-Site Scripting CVE-2025-25296	Network Scanner	Jun 11, 2026	Medium(5.4)	0.02	0.78	No
YesWiki - Cross-Site Scripting	Network Scanner	Jun 3, 2026	High	N/A	N/A	No
cPanel Mailman - Cross-Site Scripting	Network Scanner	May 27, 2026	Medium	N/A	N/A	No
PHPJabbers Event Booking Calendar - Reflected XSS	Network Scanner	May 18, 2026	Medium	N/A	N/A	No
XWiki - Cross-Site Scripting CVE-2026-40105	Network Scanner	May 5, 2026	Medium(6.1)	0.01	0.43	No
MajorDoMo - Cross-Site Scripting CVE-2026-27176	Network Scanner	May 5, 2026	Medium(6.1)	0.01	0.37	No
MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting CVE-2017-6478	Network Scanner	Apr 30, 2026	Medium(6.1)	0.03	0.84	No
RosarioSIS 6.7.2 - Cross-Site Scripting CVE-2020-15718	Network Scanner	Apr 29, 2026	Medium(6.1)	0.07	0.93	No
Odoo <= 15.0 - Cross-Site Scripting CVE-2021-26947	Network Scanner	Apr 21, 2026	Medium(6.1)	0.02	0.71	No
Retool Self-Hosted - postMessage XSS via Custom Component Collections	Network Scanner	Apr 17, 2026	High	N/A	N/A	No
Blesta <= 5.13.1 - Cross-Site Scripting CVE-2026-25616	Network Scanner	Apr 10, 2026	Medium(6.1)	0.01	0.32	No
Payara Server - Cross-Site Scripting CVE-2025-14340	Network Scanner	Apr 10, 2026	Critical(9)	0.02	0.6	No
VvvebJs <= 2.0.5 - Cross-Site Scripting CVE-2026-5615	Network Scanner	Apr 7, 2026	Medium(4.3)	0.01	0.53	No
SiYuan Note - Cross-Site Scripting CVE-2026-29183	Network Scanner	Apr 1, 2026	Medium(6.1)	0.01	0.47	No
Vite dev server - Cross-Site Scripting CVE-2023-49293	Network Scanner	Apr 1, 2026	Medium(6.1)	0.01	0.6	No
SiYuan Note - Cross-Site Scripting CVE-2026-34605	Network Scanner	Apr 1, 2026	Medium(6.1)	0.01	0.39	No
Liferay Portal & DXP - Cross-Site Scripting CVE-2025-4576	Network Scanner	Mar 30, 2026	Medium(6.1)	0.01	0.45	No
Changedetection.io RSS Single Watch - Cross-Site Scripting CVE-2026-27645	Network Scanner	Mar 13, 2026	Medium(6.1)	0.01	0.37	No
NocoDB < 0.258.0 - Reflected XSS in Password Reset CVE-2025-27506	Network Scanner	Mar 3, 2026	Medium(5.4)	0.01	0.5	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove