#cwe-79

共收录 5328 条相关情报。

← 返回所有主题

漏洞预警2026-10-28 发布MEDIUM

The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link value before outputting it in an anchor element on a listi...

CVE-2026-113487

The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link v

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布MEDIUM

The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before outputting it into an HTML attribute, allowing users with ...

CVE-2026-111967

The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before o

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布HIGH

The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise and escape a parameter before reflecting it back into an HTML attribute, leadi...

CVE-2026-111021

The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise and escape a paramete

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布MEDIUM

The Copy Anything to Clipboard for WordPress WordPress plugin before 5.5.5 does not sanitize and escape a shortcode attribute before storing it and writing it back into the pag...

CVE-2026-110524

The Copy Anything to Clipboard for WordPress WordPress plugin before 5.5.5 does not sanitize and escape a shortcode att

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布MEDIUM

The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not sanitize or escape a widget property before storing it and outputting it in the page builder interface, wh...

CVE-2026-110506

The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not sanitize or escape a widget property before stori

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布MEDIUM

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not sanitise and escape one of its map widget's size settings before concatenating it into an HTML attribut...

CVE-2026-107098

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not sanitise and escape one of its map widget's si

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布HIGH

The Menu Cart for WooCommerce WordPress plugin before 3.2.1 does not sanitise and escape cart item variation data before outputting it in its cart slide-out, allowing unauthenti...

CVE-2026-105972

The Menu Cart for WooCommerce WordPress plugin before 3.2.1 does not sanitise and escape cart item variation data before

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布MEDIUM

The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vs_text_submitbtn' parameter in all versions up to, and including, 1....

CVE-2026-111727

The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vs_text_subm

来源摘录 · NVD

#cve #cwe-79

安全公告2026-10-28 发布INFO

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-97019

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headlin