共收录 5770 条相关情报。
← 返回所有主题CVE-2026-54216
Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting (XSS) vulnerability. By
CVE-2026-15386
The Meow Gallery WordPress plugin before 5.5.2 does not escape an attachment's alt text before outputting it into an att
CVE-2026-15245
The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript con
CVE-2026-15032
The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an
CVE-2026-14331
The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a
CVE-2026-12801
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Range Slid
CVE-2026-71446
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedde
CVE-2026-71447
AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages
CVE-2026-71445
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint. When an error occu
CVE-2026-70332
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
CVE-2026-71497
jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectl
CVE-2026-71478
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the Attributes
CVE-2026-71447
AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages
CVE-2026-71446
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedde
CVE-2026-71445
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint. When an error occu
CVE-2026-71435
Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.3 and 6.24.2, the default ("automag
CVE-2026-54717
Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable
CVE-2026-49391
Frappe is a full-stack web application framework. Prior to 16.19.0 and 15.109.0, Data Import does not escape imported co
CVE-2026-48081
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver
CVE-2026-47185
Frappe is a full-stack web application framework. Prior to 16.18.0, the Workspace Save API accepts a controlled workspac