共收录 5770 条相关情报。
← 返回所有主题CVE-2026-15798
The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all
CVE-2026-78616
A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows
CVE-2026-78615
A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to
CVE-2026-78195
A Cross-Site Scripting (XSS) vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenti
CVE-2026-78047
A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privile
CVE-2026-81731
Frappe 15.11.0 through 16.32.0 stores and renders the workspace card description without XSS filtering. The description
CVE-2026-66353
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woylie doggo allow
CVE-2026-59316
Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When usi
CVE-2026-59281
Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then rende
CVE-2026-53579
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on
CVE-2026-53578
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on
CVE-2026-48996
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on
CVE-2026-53579
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on
CVE-2026-53578
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on
CVE-2026-48996
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on
CVE-2026-81820
Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object fields such as: *
CVE-2026-79720
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hid
CVE-2026-79719
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hid
CVE-2026-79718
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hid
CVE-2026-5738
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in BilPark Informatic