CVE-2026-76563Medium· 6.1▾ SunlitImproper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files. This issue affects Fileorbis: before 12.5.4.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files.
This issue affects Fileorbis: before 12.5.4.
Fileorbis < 12.5.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116858Medium· 4.3WordPress Forminator plugin <= 1.58.3 - Content Injection vulnerability
CVE-2026-111040Medium· 5.1Multiple vulnerabilities in Coupa’s Total Spend Management Platform
CVE-2026-52710Medium· 5.3WordPress GIFTiT – Free Gifts for WooCommerce plugin <= 4.5 - Content Injection vulnerability
CVE-2026-62057Medium· 5.3WordPress Divi Contact Form 7 plugin <= 4.1.0 - Content Injection vulnerability
CVE-2026-42694Medium· 4.3WordPress Kirki plugin <= 6.4.0 - Content Injection vulnerability
CVE-2026-119479Medium· 5.3WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability