Known Vulnerabilities for Click by Pallets Click
Listed below are 10 of the newest known vulnerabilities associated with "Click" by "Pallets Click".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-84960 json | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-82911 json | Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero Flow ... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-81824 json | The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-78213 json | Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers ... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-76837 json | Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ ... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-73031 json | telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaSc... | Not Provided | 2026-08-11 | 2026-08-14 |
| CVE-2026-71447 json | AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and ... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-71275 json | OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML respon... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-67338 json | JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate ... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-65445 json | Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) <= 1.3.0 versions. | Not Provided | 2026-07-27 | 2026-07-28 |