共收录 5328 条相关情报。
← 返回所有主题CVE-2026-107625
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
CVE-2013-20009
Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers
CVE-2026-58205
GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php` reflects the `forcemaj` para
CVE-2026-50571
WebSub is a W3C recommendation produced by the Social Web Working Group. In recommendation REC-websub-20180123, the inte
CVE-2026-116675
### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via elements crafted thr
CVE-2026-116687
### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability c
CVE-2026-116688
### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability i
CVE-2026-116688
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the en
CVE-2026-116687
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specia
CVE-2026-116675
TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates
CVE-2026-112353
GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webma
CVE-2026-104350
Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could expl
CVE-2026-102638
A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Librar
CVE-2026-102637
A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invo
CVE-2026-102636
A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can
CVE-2026-116675
TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates
CVE-2026-105987
KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an auth
CVE-2026-116627
Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Dev
CVE-2026-109995
The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site
CVE-2026-105323
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and