#cwe-79

共收录 5770 条相关情报。

漏洞预警2026-08-12 发布INFO

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Unencoded JSON string values reflected from stored fiel...

CVE-2026-48552

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-12 发布INFO

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attack...

CVE-2026-48550

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-12 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus ...

CVE-2026-16694

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated us

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-12 发布INFO

In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content.

CVE-2026-65937

In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject per

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-12 发布INFO

A stored cross-site scripting (XSS) vulnerability existed in Vulnerability-Lookup in the render_tag_badges Jinja filter used to display reference tags associated with vulnerabil...

CVE-2026-73374

A stored cross-site scripting (XSS) vulnerability existed in Vulnerability-Lookup in the render_tag_badges Jinja filter

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-12 发布INFO

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resource_tags, assembled by unroll_di...

CVE-2026-73262

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-08-12 发布INFO

LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment

CVE-2026-45694

### Summary `LegacyController.php:75` writes the page title into a `document.title` JS assignment using string interpola

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-79 #severity:medium

安全公告2026-08-12 发布INFO

Winter: Stored XSS through Editor Settings custom styles

CVE-2026-32258

### Impact

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-79 #severity:high

安全公告2026-08-12 发布INFO

Winter: Stored XSS through Brand Settings custom styles

CVE-2026-32257

### Impact Users

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-79 #severity:high

漏洞预警2026-08-12 发布INFO

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to...

CVE-2026-57858

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagMa

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-12 发布INFO

Ultimate POS (Stock Management & Point of Sale) contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML ...

CVE-2026-70560

Ultimate POS (Stock Management & Point of Sale) contains a stored cross-site scripting vulnerability that allows low-pri

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-12 发布INFO

The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting used to build an HTML tag before outputting it, which could allow users with ...

CVE-2026-19217

The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting used to build an HTM

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-12 发布INFO

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into an inline script block, which could allow unauthent...

CVE-2026-17013

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-287

漏洞预警2026-08-12 发布INFO

The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it on the product pages, allowing users with the Author role...

CVE-2026-16066

The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-12 发布INFO

The Patterns Kit WordPress plugin through 1.0.3 does not escape a link attribute before its client-side script inserts it into the page, allowing users with a role as low as Con...

CVE-2026-15249

The Patterns Kit WordPress plugin through 1.0.3 does not escape a link attribute before its client-side script inserts i

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-08-12 发布INFO

tablib: Stored XSS in the HTML export via unescaped dataset title

CVE-2026-9318

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-79 #severity:medium

漏洞预警2026-08-12 发布INFO

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding m...

CVE-2026-9318

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-08-12 发布INFO

tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

CVE-2026-9318

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-08-11 发布INFO

telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...

CVE-2026-73031

telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary J

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:high

安全公告2026-08-11 发布INFO

Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044...

CVE-2026-66146

Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium