Vulnerabilities in dartiss
11 resultsCVE-2026-48094MEDIUMShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared URL in Content OutputEPSS 0.5%CVE-2024-10814MEDIUMCode Embed <= 2.5 - Authenticated (Contributor+) Server-Side Request ForgeryEPSS 0.3%CVE-2026-49466MEDIUMDraft List - Contributor Stored Cross-Site Scripting via Draft Title in Custom Drafts Template AttributesEPSS 0.3%CVE-2026-48093MEDIUMCode Embed - Contributor Stored Cross-Site Scripting via Remote URL EmbedEPSS 0.3%CVE-2026-4006MEDIUMDraft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' ParameterEPSS 0.3%CVE-2024-8804MEDIUMCode Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-10181MEDIUMDraft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-11197MEDIUMDraft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-9104MEDIUMDraft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post TitleEPSS 0.2%CVE-2026-2512MEDIUMCode Embed <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom FieldsEPSS 0.2%CVE-2026-6809MEDIUMSocial Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads EmbedEPSS 0.2%