Stored XSS

Vulnerability

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 10, 2025

Last Seen

August 12, 2026

API

Stored XSS (persistent cross-site scripting) is a vulnerability where attacker-supplied scripts are stored on a server (in databases, logs, or content assets) and later delivered to users, allowing the code to execute in their browsers.

Overview

Recent Events

Related Clusters (8)

1 / 2

Related Entities

Command Injection Phishing Remote Code Execution Eurostar Pen Test Partners Ivanti CVE-2026-16155 CVE-2026-26195 Cwe-79 - Cross-site Scripting (xss)CWE-120 - Classic Buffer Overflow CWE-200 - Exposure of Sensitive Information CWE-22 - Path Traversal

Stored XSS

Overview

Recent Events

Profile

Tools Used

Related CVEs

Affected Platforms

Related Clusters (8)

Critical XSS Vulnerability in Chamilo LMS Leads to Admin Account Takeover

OpenWrt Releases Critical Security Updates for DHCPv6 Vulnerabilities

Critical Vulnerabilities in Adobe Products Allow Arbitrary Code Execution

Gogs Vulnerabilities Lead to XSS and Token Leakage Risks

Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching

Eurostar AI Chatbot Vulnerabilities Addressed by Security Firm

Eurostar Chatbot Vulnerabilities Reported by Pen Test Partners

Stored XSS Vulnerability in RustFS Console Exposes Admin S3 Credentials

Related Articles (8)

Adobe Security Bulletin

OpenWrt releases security updates for critical DHCPv6 flaw and other vulnerabilities

CVE-2026-16155: XSS (CVSS 3.5)

CVE-2026-26195

Stored XSS Flaw in RustFS Console Leaks Admin S3 Credentials

Eurostar AI vulnerability: when a chatbot goes off the rails

Pen testers accused of 'blackmail' after reporting Eurostar chatbot flaws

CC-4726

Related Entities