Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.192 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: xss

Displaying 1 - 25 results out of 2020

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
YesWiki Archived Revision - Cross-Site Scripting CVE-2026-52773	Network Scanner	Jul 22, 2026	Medium(6.1)	0.01	0.1	No
Apache Tomcat - Cross-Site Scripting CVE-2026-50229	Network Scanner	Jul 14, 2026	Medium(6.1)	0.05	0.91	No
YesWiki Bazar Widget - Reflected XSS via 'id' Parameter CVE-2026-52774	Network Scanner	Jul 13, 2026	Medium(6.1)	0.01	0.13	No
Dashy <= 4.3.6 - Reflected XSS via Workspace CVE-2026-55592	Network Scanner	Jun 22, 2026	Medium(6.1)	0.01	0.17	No
DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting CVE-2025-61224	Network Scanner	Jun 17, 2026	Medium(6.1)	0.02	0.69	No
Lyrion Music Server <= 9.2.0 - Cross-Site Scripting CVE-2026-50230	Network Scanner	Jun 15, 2026	Medium(6.1)	0.01	0.34	No
Label Studio < 1.18.0 - Reflected XSS CVE-2025-47783	Network Scanner	Jun 4, 2026	Medium(6.1)	0.01	0.45	No
YesWiki - Cross-Site Scripting	Network Scanner	Jun 3, 2026	High	N/A	N/A	No
PHPJabbers Event Booking Calendar - Reflected XSS	Network Scanner	May 18, 2026	Medium	N/A	N/A	No
WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSS	Network Scanner	May 15, 2026	High	N/A	N/A	No
MajorDoMo - Cross-Site Scripting CVE-2026-27176	Network Scanner	May 5, 2026	Medium(6.1)	0.01	0.37	No
XWiki - Cross-Site Scripting CVE-2026-40105	Network Scanner	May 5, 2026	Medium(6.1)	0.01	0.43	No
MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting CVE-2017-6478	Network Scanner	Apr 30, 2026	Medium(6.1)	0.03	0.84	No
RosarioSIS 6.7.2 - Cross-Site Scripting CVE-2020-15718	Network Scanner	Apr 29, 2026	Medium(6.1)	0.07	0.93	No
Odoo <= 15.0 - Cross-Site Scripting CVE-2021-26947	Network Scanner	Apr 21, 2026	Medium(6.1)	0.02	0.71	No
Retool Self-Hosted - postMessage XSS via Custom Component Collections	Network Scanner	Apr 17, 2026	High	N/A	N/A	No
WSO2 - Server Side Request Forgery CVE-2025-5350	Network Scanner	Apr 13, 2026	Medium(5.9)	0.01	0.45	No
Payara Server - Cross-Site Scripting CVE-2025-14340	Network Scanner	Apr 10, 2026	Critical(9)	0.02	0.6	No
SiYuan <= v3.5.9 - Cross Site Scripting CVE-2026-31809	Network Scanner	Apr 7, 2026	Medium(6.1)	0.01	0.41	No
VvvebJs <= 2.0.5 - Cross-Site Scripting CVE-2026-5615	Network Scanner	Apr 7, 2026	Medium(4.3)	0.01	0.53	No
Pi-hole Reflected XSS in 404-Error Page CVE-2025-53533	Network Scanner	Apr 3, 2026	Medium(6.1)	0.01	0.44	No
SiYuan <= v3.5.9 - SVG Animate Element XSS CVE-2026-31807	Network Scanner	Apr 2, 2026	Medium(6.1)	0.01	0.37	No
Heimdall Application Dashboard < 2.7.3 - Reflected XSS CVE-2025-54597	Network Scanner	Apr 1, 2026	Medium(6.1)	0.01	0.44	No
Vite dev server - Cross-Site Scripting CVE-2023-49293	Network Scanner	Apr 1, 2026	Medium(6.1)	0.01	0.6	No
SiYuan Note - Cross-Site Scripting CVE-2026-29183	Network Scanner	Apr 1, 2026	Medium(6.1)	0.01	0.47	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove