XSS

Everything Threat Times has reported about XSS: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Contao CMS Critical Stored XSS Flaw in Comment Module Patched in Latest Releases

Threat TimesOct 9, 2026

An unauthenticated stored cross-site scripting vulnerability in the Contao content management system allows attackers to execute scripts in the backend, affecting versions prior to 5.3.50 and 5.7.12.

Vulnerabilities

IBM Guardium 12.2 Has Critical Stored XSS Flaw in Quick Search Grid

Threat TimesOct 8, 2026

An unauthenticated attacker can execute malicious scripts in authenticated user browsers via the Quick Search results grid.