#cwe-79

共收录 5770 条相关情报。

← 返回所有主题
漏洞预警2026-09-01 发布INFO

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter in a...

CVE-2026-19796

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘doCommentShortcode’ function in all versions up to, and including, 1.10....

CVE-2026-19573

The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘doCommentShortc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode in all versions up to, and...

CVE-2026-16787

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_id' shortcode attribute of the dslc_modules_...

CVE-2026-13203

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode Attribute in all versions up to, and including, 3.29.11 du...

CVE-2026-12747

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamContro...

CVE-2026-82396

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8,

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.

CVE-2026-82229

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions.

CVE-2026-82224

Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions.

CVE-2026-82221

Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions.

CVE-2026-81764

Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Uncode <= 2.12.7 versions.

CVE-2026-81291

Unauthenticated Cross Site Scripting (XSS) in Uncode <= 2.12.7 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Tailored Tools <= 3.0.2 versions.

CVE-2026-81765

Unauthenticated Cross Site Scripting (XSS) in Tailored Tools <= 3.0.2 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.

CVE-2026-81778

Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions.

CVE-2026-81768

Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.

CVE-2026-81298

Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.

CVE-2026-81290

Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.

CVE-2026-82229

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions.

CVE-2026-82224

Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions.

CVE-2026-82221

Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string parser in js/plugins/history/index.js, including fromQueryS...

CVE-2026-81887

Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string pa

历史摘要 · 未重新核验 · NVD