CVE-2026-46396 CRITICAL CVSS 9.3 Find Similar HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 26.0.0 due to improper sanitization of `` ele<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.016</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2026-46496">CVE-2026-46496</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-critical"><!---->CRITICAL<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 9.3</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2026-46496">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 26.0.0 due to improper sanitization of the `<video-pl<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.016</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2026-22704">CVE-2026-22704</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 5.4</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2026-22704">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which could lead to account takeover. This issue has been<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><a class="vendor-chip svelte-e12qt1" href="/affected-products?vendor=psu">psu</a><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.016</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2026-48527">CVE-2026-48527</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-high"><!---->HIGH<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 8.7</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2026-48527">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up to and including 26.0.0 are affected by a stored cross-site scripting (XSS) vulnerability in the `/system/api/saveNode`<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.016</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2026-46399">CVE-2026-46399</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-critical"><!---->CRITICAL<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 9.4</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2026-46399">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An attacker can exploit this <!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.015</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2025-54139">CVE-2025-54139</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 6.1</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2025-54139">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend. In haxcms-nodejs versions 11.0.12 and below and in haxcms-php versions 11.0.7 and below, all pages within the HAX <!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><a class="vendor-chip svelte-e12qt1" href="/affected-products?vendor=psu">psu</a><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.015</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2026-46511">CVE-2026-46511</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-high"><!---->HIGH<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 8.7</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2026-46511">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an attack chain utilizing Stored XSS alongside dynamic token exposure in the `/system/api/connectionSettin<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.015</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2025-49137">CVE-2025-49137</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 6.1</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2025-49137">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application does not sufficiently sanitize user input, allowing for the execution of arbitr<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><a class="vendor-chip svelte-e12qt1" href="/affected-products?vendor=psu">psu</a><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.015</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2025-49138">CVE-2025-49138</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 6.5</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2025-49138">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline endpoint al<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><a class="vendor-chip svelte-e12qt1" href="/affected-products?vendor=psu">psu</a><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.014</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2025-0602">CVE-2025-0602</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-high"><!---->HIGH<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 8.7</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2025-0602">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->A stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execu<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.014</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2026-46391">CVE-2026-46391</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-high"><!---->HIGH<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 8.7</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2026-46391">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 9.0.1 and prior to version 26.0.0 of @haxtheweb/open-apis, multiple functions conduct substring-only matching t<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.014</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2022-50905">CVE-2022-50905</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 6.1</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2022-50905">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->e107 CMS version 3.2.1 contains multiple vulnerabilities that allow cross-site scripting (XSS) attacks. The first vulnerability is a reflected XSS that occurs in the news comment functionality when au<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><a class="vendor-chip svelte-e12qt1" href="/affected-products?vendor=e107">e107</a><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.014</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2026-3244">CVE-2026-3244</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 4.8</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2026-3244">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->In Concrete CMS below version 9.4.8, A stored cross-site scripting (XSS) vulnerability exists in the search block where page names and content are rendered without proper HTML encoding in search resul<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><a class="vendor-chip svelte-e12qt1" href="/affected-products?vendor=concretecms">concretecms</a><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.014</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2024-8101">CVE-2024-8101</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 6.1</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2024-8101">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->A stored cross-site scripting (XSS) vulnerability exists in the Text Explorer component of aimhubio/aim version 3.23.0. The vulnerability arises due to the use of `dangerouslySetInnerHTML` without pro<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><a class="vendor-chip svelte-e12qt1" href="/affected-products?vendor=aimstack">aimstack</a><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.014</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2025-61456">CVE-2025-61456</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 6.1</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2025-61456">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.013</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2025-60869">CVE-2025-60869</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-high"><!---->HIGH<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 7.3</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2025-60869">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->Publii CMS v0.46.5 (build 17089) allows persistent Cross-Site Scripting (XSS) via unsanitized input in configuration fields such as "Site Description" and "Footer Follow Buttons". An attacker can inje<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.013</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2024-25837">CVE-2024-25837</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 5.4</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2024-25837">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->A stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments secti<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><a class="vendor-chip svelte-e12qt1" href="/affected-products?vendor=octobercms">octobercms</a><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.013</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2025-11682">CVE-2025-11682</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-high"><!---->HIGH<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 7.1</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2025-11682">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement & Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victi<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.013</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2025-43731">CVE-2025-43731</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-medium"><!---->MEDIUM<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 6.9</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2025-43731">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><a class="vendor-chip svelte-e12qt1" href="/affected-products?vendor=liferay">liferay</a><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.013</span></div></div></article><article class="result-card svelte-e12qt1"><div class="card-header svelte-e12qt1"><a class="cve-id svelte-e12qt1" href="/cve/CVE-2026-46392">CVE-2026-46392</a> <div class="card-badges svelte-e12qt1"><span class="badge svelte-eex7hx" data-variant="severity-high"><!---->HIGH<!----></span><!----> <!--[0--><span class="cvss-chip svelte-e12qt1">CVSS 8.7</span><!--]--> <!--[-1--><!--]--></div> <a class="btn-similar svelte-e12qt1" href="/search?similarTo=CVE-2026-46392">Find Similar <svg xmlns="http://www.w3.org/2000/svg" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><line x1="5" y1="12" x2="19" y2="12" class="svelte-e12qt1"></line><polyline points="12 5 19 12 12 19" class="svelte-e12qt1"></polyline></svg></a></div> <div class="card-desc svelte-e12qt1"><!---->HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the `saveFile` endpoint validates upload extensions case-insensitively and writes the filen<!----></div> <div class="card-meta-row svelte-e12qt1"><div class="card-vendors-inline svelte-e12qt1"><!--[--><!--]--></div> <div class="footer-meta svelte-e12qt1"><span class="source-tag svelte-e12qt1"><svg xmlns="http://www.w3.org/2000/svg" width="10" height="10" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="svelte-e12qt1"><polyline points="20 6 9 17 4 12" class="svelte-e12qt1"></polyline></svg> NVD</span> <span class="rrf-score svelte-e12qt1">RRF 0.013</span></div></div></article><!--]--></div> <!--[0--><div class="pagination-row svelte-e12qt1"><!--[-1--><!--]--> <span class="page-info svelte-e12qt1">Page 1+</span> <!--[0--><a class="btn-page btn-page-next svelte-e12qt1" href="/search?similarTo=CVE-2026-46396&offset=20">Next →</a><!--]--></div><!--]--><!--]--></div><!--]--><!----></main></div></div> <div class="toast-region svelte-1fk2ial" aria-live="polite" aria-atomic="false"><!--[--><!--]--></div><!----><!--]--><!--]--> <!--[-1--><!--]--><!--]--> <script> { __sveltekit_4pw80m = { base: new URL(".", location).pathname.slice(0, -1) }; const element = document.currentScript.parentElement; Promise.all([ import("./_app/immutable/entry/start.ZUc-Dm9j.js"), import("./_app/immutable/entry/app.CmNRmdYL.js") ]).then(([kit, app]) => { kit.start(app, element, { node_ids: [0, 11], data: [null,{type:"data",data:{formState:{query:"",severity:[],vendor:[],cwe:[],kev:false,minCvss:"",publishedSince:"",similarTo:"CVE-2026-46396",offset:0},results:{results:[{cveId:"CVE-2026-46396",score:.01639344262295082,severity:"CRITICAL",cvssBase:9.3,kevListed:false,epssPercentile:.13738,publishedAt:"2026-06-05T19:16:33.750Z",vendors:[],snippet:"HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 26.0.0 due to improper sanitization of `\u003Ciframe>` ele"},{cveId:"CVE-2026-46496",score:.016129032258064516,severity:"CRITICAL",cvssBase:9.3,kevListed:false,epssPercentile:.13738,publishedAt:"2026-06-05T19:16:34.113Z",vendors:[],snippet:"HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 26.0.0 due to improper sanitization of the `\u003Cvideo-pl"},{cveId:"CVE-2026-22704",score:.015873015873015872,severity:"MEDIUM",cvssBase:5.4,kevListed:false,epssPercentile:.59574,publishedAt:"2026-01-10T07:16:03.200Z",vendors:["psu"],snippet:"HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which could lead to account takeover. This issue has been"},{cveId:"CVE-2026-48527",score:.015625,severity:"HIGH",cvssBase:8.7,kevListed:false,epssPercentile:.13474,publishedAt:"2026-05-29T13:16:23.133Z",vendors:[],snippet:"HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up to and including 26.0.0 are affected by a stored cross-site scripting (XSS) vulnerability in the `/system/api/saveNode`"},{cveId:"CVE-2026-46399",score:.015384615384615385,severity:"CRITICAL",cvssBase:9.4,kevListed:false,epssPercentile:.20701,publishedAt:"2026-06-05T19:16:33.960Z",vendors:[],snippet:"HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An attacker can exploit this "},{cveId:"CVE-2025-54139",score:.015151515151515152,severity:"MEDIUM",cvssBase:6.1,kevListed:false,epssPercentile:.21632,publishedAt:"2025-07-23T00:15:25.737Z",vendors:["psu"],snippet:"HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend. In haxcms-nodejs versions 11.0.12 and below and in haxcms-php versions 11.0.7 and below, all pages within the HAX "},{cveId:"CVE-2026-46511",score:.014925373134328358,severity:"HIGH",cvssBase:8.7,kevListed:false,epssPercentile:.19236,publishedAt:"2026-06-05T19:16:34.267Z",vendors:[],snippet:"HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an attack chain utilizing Stored XSS alongside dynamic token exposure in the `/system/api/connectionSettin"},{cveId:"CVE-2025-49137",score:.014705882352941176,severity:"MEDIUM",cvssBase:6.1,kevListed:false,epssPercentile:.13233,publishedAt:"2025-06-09T21:15:46.890Z",vendors:["psu"],snippet:"HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application does not sufficiently sanitize user input, allowing for the execution of arbitr"},{cveId:"CVE-2025-49138",score:.014492753623188406,severity:"MEDIUM",cvssBase:6.5,kevListed:false,epssPercentile:.35068,publishedAt:"2025-06-09T21:15:47.047Z",vendors:["psu"],snippet:"HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline endpoint al"},{cveId:"CVE-2025-0602",score:.014285714285714285,severity:"HIGH",cvssBase:8.7,kevListed:false,epssPercentile:.1792,publishedAt:"2025-05-30T15:15:40.360Z",vendors:[],snippet:"A stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execu"},{cveId:"CVE-2026-46391",score:.014084507042253521,severity:"HIGH",cvssBase:8.7,kevListed:false,epssPercentile:.36391,publishedAt:"2026-06-05T19:16:33.007Z",vendors:[],snippet:"HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 9.0.1 and prior to version 26.0.0 of @haxtheweb/open-apis, multiple functions conduct substring-only matching t"},{cveId:"CVE-2022-50905",score:.013888888888888888,severity:"MEDIUM",cvssBase:6.1,kevListed:false,epssPercentile:.43072,publishedAt:"2026-01-13T23:15:53.083Z",vendors:["e107"],snippet:"e107 CMS version 3.2.1 contains multiple vulnerabilities that allow cross-site scripting (XSS) attacks. The first vulnerability is a reflected XSS that occurs in the news comment functionality when au"},{cveId:"CVE-2026-3244",score:.0136986301369863,severity:"MEDIUM",cvssBase:4.8,kevListed:false,epssPercentile:.09439,publishedAt:"2026-03-04T02:15:54.663Z",vendors:["concretecms"],snippet:"In Concrete CMS below version 9.4.8, A stored cross-site scripting (XSS) vulnerability exists in the search block where page names and content are rendered without proper HTML encoding in search resul"},{cveId:"CVE-2024-8101",score:.013513513513513514,severity:"MEDIUM",cvssBase:6.1,kevListed:false,epssPercentile:.31984,publishedAt:"2025-03-20T10:15:41.130Z",vendors:["aimstack"],snippet:"A stored cross-site scripting (XSS) vulnerability exists in the Text Explorer component of aimhubio/aim version 3.23.0. The vulnerability arises due to the use of `dangerouslySetInnerHTML` without pro"},{cveId:"CVE-2025-61456",score:.013333333333333334,severity:"MEDIUM",cvssBase:6.1,kevListed:false,epssPercentile:.15157,publishedAt:"2025-10-20T15:15:33.820Z",vendors:[],snippet:"A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the"},{cveId:"CVE-2025-60869",score:.013157894736842105,severity:"HIGH",cvssBase:7.3,kevListed:false,epssPercentile:.15791,publishedAt:"2025-10-10T15:16:05.710Z",vendors:[],snippet:"Publii CMS v0.46.5 (build 17089) allows persistent Cross-Site Scripting (XSS) via unsanitized input in configuration fields such as \"Site Description\" and \"Footer Follow Buttons\". An attacker can inje"},{cveId:"CVE-2024-25837",score:.012987012987012988,severity:"MEDIUM",cvssBase:5.4,kevListed:false,epssPercentile:.13217,publishedAt:"2024-08-16T18:15:08.907Z",vendors:["octobercms"],snippet:"A stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments secti"},{cveId:"CVE-2025-11682",score:.01282051282051282,severity:"HIGH",cvssBase:7.1,kevListed:false,epssPercentile:.07641,publishedAt:"2025-10-27T08:15:36.220Z",vendors:[],snippet:"Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement & Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victi"},{cveId:"CVE-2025-43731",score:.012658227848101266,severity:"MEDIUM",cvssBase:6.9,kevListed:false,epssPercentile:.09904,publishedAt:"2025-08-18T19:15:26.947Z",vendors:["liferay"],snippet:"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3."},{cveId:"CVE-2026-46392",score:.0125,severity:"HIGH",cvssBase:8.7,kevListed:false,epssPercentile:.12832,publishedAt:"2026-06-05T19:16:33.160Z",vendors:[],snippet:"HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the `saveFile` endpoint validates upload extensions case-insensitively and writes the filen"}],truncated:true}},uses:{search_params:["q","similarTo","severity","vendor","cwe","kev","minCvss","publishedSince","offset","product","epss"]}}], form: null, error: null }); }); } </script> </div> </body> </html>