#cwe-79

共收录 5770 条相关情报。

← 返回所有主题
漏洞预警2026-09-01 发布INFO

The WP Recipe Maker Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprm-call-to-action' shortcode in all versions up to, and includi...

CVE-2026-7877

The WP Recipe Maker Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprm-cal

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowi...

CVE-2026-19471

Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is n

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descr...

CVE-2026-84193

LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render un

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacke...

CVE-2026-84192

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrf_name, and mplsVpnVrfRouteDistinguisher fields f...

CVE-2026-84191

LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescrip

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by the admin-configurable Oxidized integration URL (oxidized.url) into the device ...

CVE-2026-84189

LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by the admin-configurable

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

LibreNMS versions <= 26.4.0 contain a stored cross-site scripting vulnerability in the graph_descr.<graphtype> configuration settings, which are echoed verbatim without HTML esc...

CVE-2026-84188

LibreNMS versions configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP

CVE-2026-84193

LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render un

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data

CVE-2026-84192

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sou

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields

CVE-2026-84191

LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescrip

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

LibreNMS before 26.7.0 Stored XSS via Oxidized API

CVE-2026-84189

LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by the admin-configurable

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

librenms before 26.7.0 Stored XSS via graph_descr settings

CVE-2026-84188

LibreNMS versions configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-01 发布INFO

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_order' parameter in all versions up to, and including, 2.12.1 due to ins...

CVE-2026-19914

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_order' paramete

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_projects_output Shortcode in all versions up...

CVE-2026-16788

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_testimonials_output Shortcode in all version...

CVE-2026-16786

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insuffici...

CVE-2026-15101

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Heading 'id' Attribute in ...

CVE-2026-75980

The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' ...

CVE-2026-75964

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data) in all versions up to, and including...

CVE-2026-18488

The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute (b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'date' Short...

CVE-2026-75965

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v

历史摘要 · 未重新核验 · NVD