共收录 5676 条相关情报。
← 返回所有主题CVE-2026-76986
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Abstra
CVE-2026-76985
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.
CVE-2026-76984
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.head.MetaDataHea
CVE-2026-76983
Improper neutralization of input during web page generation in Apache Wicket. The tag is provided by org.apache.wicket
CVE-2026-76982
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button
CVE-2026-75802
AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value
CVE-2026-82881
Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored c
CVE-2026-82881
Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored c
CVE-2026-82868
@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-sup
CVE-2026-82867
@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sani
CVE-2026-82865
pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that a
CVE-2026-82664
A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknown part of the file a
CVE-2026-82868
@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-sup
CVE-2026-82867
@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sani
CVE-2026-82865
pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that a
CVE-2026-82625
A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /r
CVE-2026-82622
A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown f
CVE-2026-40464
NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow appl
CVE-2026-82601
A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a mani
CVE-2026-77850
Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script i