共收录 5770 条相关情报。
← 返回所有主题CVE-2026-72925
SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swc_html_mi
CVE-2026-19434
Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute ar
CVE-2026-72747
AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject maliciou
CVE-2026-72559
A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent
CVE-2026-72553
A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registered member to inject persisten
CVE-2026-73161
Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feat
CVE-2026-73159
Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's
CVE-2026-73158
Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can cont
CVE-2026-73157
Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser interface usi
CVE-2026-73156
Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap t
CVE-2026-16974
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site
CVE-2026-66779
Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker co
CVE-2026-66771
SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted applicatio
CVE-2026-72743
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashb
CVE-2026-44401
Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that
CVE-2026-69116
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.
CVE-2026-72743
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashb
CVE-2026-69116
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.
CVE-2026-44401
Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that
CVE-2026-56619
HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and out