BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing upload endpoint that accepts unvalidated base64 content and stores it without conten...

CVE-2026-84695

BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing upload endpoint that accept

历史摘要 · 未重新核验 · NVD

NocoBase Rich Text Field Stored Cross-Site Scripting via API

CVE-2026-84701

NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store

历史摘要 · 未重新核验 · OSV.dev

BookStack before 26.05.4 Stored XSS via Drawing Upload

CVE-2026-84695

BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing upload endpoint that accept

历史摘要 · 未重新核验 · OSV.dev

AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization,...

CVE-2026-84477

AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streami

历史摘要 · 未重新核验 · GitHub Advisory

AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticate...

CVE-2026-84477

AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streami

历史摘要 · 未重新核验 · NVD

AVideo Stored XSS via Live Schedule Title Description

CVE-2026-84477

AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streami

历史摘要 · 未重新核验 · OSV.dev

ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass

CVE-2026-84371

### Summary When SVG animation is allowed, `attributeName="href"` makes `values` a list of URL destinations. `sanitize-h

历史摘要 · 未重新核验 · GitHub Advisory

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From version 1.9.0 until version 2.17.7, ...

CVE-2026-84371

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi

历史摘要 · 未重新核验 · NVD

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in ...

CVE-2026-84370

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version

历史摘要 · 未重新核验 · NVD

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in ...

CVE-2026-84369

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version

历史摘要 · 未重新核验 · NVD

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an adm...

CVE-2026-73781

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct

历史摘要 · 未重新核验 · NVD

Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious ...

CVE-2026-73524

Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to

历史摘要 · 未重新核验 · NVD

ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass

CVE-2026-84371

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi

历史摘要 · 未重新核验 · OSV.dev

SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements

CVE-2026-84369

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version

历史摘要 · 未重新核验 · OSV.dev

league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed

### Summary The `AttributesExtension` documents a security guarantee: > **Note:** Attributes starting with `on` (e.g.

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scriptin...

CVE-2026-73731

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated r

历史摘要 · 未重新核验 · NVD

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting...

CVE-2026-73703

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated a

历史摘要 · 未重新核验 · NVD

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site s...

CVE-2026-73700

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low

历史摘要 · 未重新核验 · NVD

Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes

CVE-2026-58191

## Summary Appium's base-driver mounts the built-in `/test/guinea-pig`, `/test/guinea-pig-scrollable` and `/test/guinea

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type (e.g., text/html for .html ...

CVE-2026-84232

A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served wit

历史摘要 · 未重新核验 · NVD