#cwe-79

共收录 5770 条相关情报。

漏洞预警2026-08-13 发布INFO

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in...

CVE-2026-73648

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the Zimbra Classic Web Client due to insufficient sanitization of speci...

CVE-2026-73572

In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the Zimbra Cla

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markd...

CVE-2026-19744

Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute a

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme and snsthe...

CVE-2026-28154

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - C

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.

CVE-2026-73357

Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

CVE-2026-73344

Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.

CVE-2026-73340

Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.

CVE-2026-66700

Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.

CVE-2026-66698

Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.

CVE-2026-66697

Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 vers

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.

CVE-2026-66687

Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.

CVE-2026-66655

Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.

CVE-2026-66471

Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.

CVE-2026-66468

Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.

CVE-2026-66467

Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.

CVE-2026-66460

Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.

CVE-2026-66456

Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.

CVE-2026-66449

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.

CVE-2026-66429

Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-13 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.

CVE-2026-66426

Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79