#cwe-79

共收录 5770 条相关情报。

← 返回所有主题

漏洞预警2026-08-18 发布INFO

Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org markup outputs.

CVE-2026-73336

Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including ...

CVE-2026-52606

A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote attackers to execute arbitr

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code

CVE-2026-30250

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, Kestra's custom Markdown parser in ui/src/utils/markdown_plugins/link.ts allows a user with permi...

CVE-2026-55839

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, Kestra's custom Markdown parser in ui/sr

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

MyBB is free and open source forum software. Prior to 1.8.40, the user datahandler does not properly validate checkbox and multiselect profile field types, resulting in stored J...

CVE-2026-45116

MyBB is free and open source forum software. Prior to 1.8.40, the user datahandler does not properly validate checkbox a

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

MyBB is free and open source forum software. Prior to 1.8.40, the Buddy/Ignore component does not sanitize usernames correctly, allowing attackers to perform JavaScript code inj...

CVE-2026-45115

MyBB is free and open source forum software. Prior to 1.8.40, the Buddy/Ignore component does not sanitize usernames cor

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes ...

CVE-2026-73426

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cro

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.

CVE-2026-73393

Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions.

CVE-2026-73382

Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.

CVE-2026-73378

Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.

CVE-2026-73375

Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions.

CVE-2026-73362

Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions.

CVE-2026-73361

Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.

CVE-2026-73360

Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.

CVE-2026-73359

Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.

CVE-2026-73358

Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.

CVE-2026-73351

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.

CVE-2026-73342

Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.

CVE-2026-73338

Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-18 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.

CVE-2026-73190

Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79