Known Vulnerabilities for Site Server by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Site Server" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103389 json | MISP contains a stored cross-site scripting (XSS) vulnerability in the galaxy icon handling path. The icon field of a galaxy ... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-103321 json | MISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph preview ima... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102811 json | Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-101148 json | The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-100720 json | Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authenticat... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100695 json | Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() database result is interpolated ... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100672 json | The Comments plugin (getgrav/grav-plugin-comments) for Grav CMS through version 1.2.10 registers an admin handler that return... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-97288 json | Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-96561 json | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scrip... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-96525 json | The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or sufficient capability check on i... | Not Provided | 2026-09-26 | 2026-09-26 |