#cwe-79

共收录 5426 条相关情报。

漏洞预警2026-09-03 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Booking and Rental Manager allows Stored XSS. This issue a...

CVE-2026-85303

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Bo

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. ...

CVE-2026-85302

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Th

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.

CVE-2026-84848

Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.

CVE-2026-84812

Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.

CVE-2026-84774

Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.

CVE-2026-84773

Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.

CVE-2026-84765

Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.

CVE-2026-84763

Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WP QuickLaTeX <= 3.8.8 versions.

CVE-2026-81776

Unauthenticated Cross Site Scripting (XSS) in WP QuickLaTeX <= 3.8.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension <= 3.3.26 versions.

CVE-2026-81773

Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension <= 3.3.26 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Calculation For Contact Form 7 <= 1.0 versions.

CVE-2026-81300

Unauthenticated Cross Site Scripting (XSS) in Calculation For Contact Form 7 <= 1.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions.

CVE-2026-81295

Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.

CVE-2026-81292

Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18 versions.

CVE-2026-81282

Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

Subscriber Cross Site Scripting (XSS) in Graphene <= 2.9.4 versions.

CVE-2026-81281

Subscriber Cross Site Scripting (XSS) in Graphene <= 2.9.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the widget was rendered a...

CVE-2026-85230

A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widge

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-79

漏洞预警2026-09-03 发布INFO

MISP contains a reflected Cross-Site Scripting (XSS) vulnerability in the event attribute filtering query builder. The taggedAttributes and galaxyAttachedAttributes URL paramete...

CVE-2026-85227

MISP contains a reflected Cross-Site Scripting (XSS) vulnerability in the event attribute filtering query builder. The t

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /f...

CVE-2026-56128

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firew...

CVE-2026-56127

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inje

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-03 发布INFO

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters i...

CVE-2026-56126

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject

历史摘要 · 未重新核验 · NVD

#cve #cwe-79