tag
Reflected-Xss
Medium
WordPress "List Site Contributors" Plugin Reflected XSS Scanner (CVE-2026-0594)
CVE-2026-0594·
"List Site Contributors" WordPress plugin
unpatched
Medium
School Management System 1.0 — Reflected XSS in register.php (CVE-2026-37750)
CVE-2026-37750·
School Management System (mahmoudai1) 1.0
unpatched
Medium
OpenSTAManager Reflected XSS via `righe` Parameter (CVE-2026-24415)
CVE-2026-24415 (GHSA-jfgp-g7x7-j25j)·
OpenSTAManager (devcode-it/openstamanager)
patched
Medium
Gravity Forms Unauthenticated Reflected XSS via `gform_get_config` `form_ids` Parameter (CVE-2026-4406)
CVE-2026-4406·
Gravity Forms (WordPress plugin) by Rocketgenius, Inc.
patched