共收录 5770 条相关情报。
← 返回所有主题CVE-2026-5751
justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability
CVE-2026-77115
Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without
CVE-2026-78060
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of t
CVE-2026-78059
A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of
CVE-2026-77115
Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without
CVE-2026-78060
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of t
CVE-2026-78059
A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of
CVE-2026-78055
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vul
CVE-2026-78054
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function
CVE-2026-78055
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vul
CVE-2026-78054
该漏洞影响 SourceCodester Class and Exam Timetabling System 1.0。问题存在于 /BSIS1.php 文件中一个未明确命名的函数，通过对 course 参数进行特定操作可触发跨站脚本（XSS
CVE-2026-77027
Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in
CVE-2026-4561
The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form respon
CVE-2026-4559
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dela
CVE-2026-66917
Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store a
CVE-2026-53529
LeafWiki is a self-hosted wiki. Prior to version 0.10.2, page titles returned by the search API could be rendered as raw
CVE-2026-53468
Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites. Ver
CVE-2026-43980
Malla is a web analyzer for Meshtastic networks based on MQTT data. Prior to commit 4086e2b5f61615a813b70b25bc7609508355
CVE-2026-33240
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting (XSS)
CVE-2026-69236
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote,