共收录 5770 条相关情报。
← 返回所有主题CVE-2026-55779
Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage() i
CVE-2026-55779
### Impact It's possible to use the page title as an XSS vector when restoring a page in ArchiveAdmin ### Reporter Stev
CVE-2026-55696
PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.se
CVE-2026-55696
### Summary Stored cross-site scripting (XSS) in PrivateBin's attachment download link. An anonymous attacker can creat
CVE-2026-76798
The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its genera
CVE-2026-76794
MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML.
CVE-2026-55566
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs processes attacker-controlled data from the /ext
CVE-2026-55549
Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirect_uri parameter from
CVE-2026-81760
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngi
CVE-2026-6176
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregate
CVE-2026-5953
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ceviz Informatics
CVE-2026-5934
The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0
CVE-2026-5800
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Dayneks Software I
CVE-2026-4378
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Sof
CVE-2026-3423
The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' confi
CVE-2026-38725
xipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject arbitrary JavaScript v
CVE-2026-37710
Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site na
CVE-2026-78073
Joomla Extension - mrvinoth.com - Reflected XSS in All Video Share 1.0.0-4.5.0 - Various user supplied inputs lacked esc
CVE-2026-78071
Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0 - 10.11.2 - Location tit
CVE-2026-6128
The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th