#cwe-79

共收录 5770 条相关情报。

← 返回所有主题

安全公告2026-07-31 发布INFO

sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes

CVE-2026-53606

## Summary sanitize-html uses `allowedSchemesAppliedToAttributes` (default: `['href', 'src', 'cite']`) to gate the `nau

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-79 #severity:medium

漏洞预警2026-07-31 发布INFO

Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodit's sanitizeHTMLElement method fails to use isDangerousUrl to normalize javas...

CVE-2026-62324

Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodit's sanitizeHTMLElem

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-83

漏洞预警2026-07-31 发布INFO

Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an authenticated remote user to steal session tokens and escalate to fu...

CVE-2026-18481

Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an authenticate

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-07-31 发布INFO

Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier

CVE-2026-58263

### Summary jodit's built-in `clean-html` sanitizer can be bypassed by a MathML/`` carrier that hides a dangerous elemen

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-79 #cwe-83 #severity:high

安全公告2026-07-31 发布INFO

Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS

CVE-2026-62324

### Summary jodit's `sanitizeHTMLElement` neutralizes a `javascript:` `href` using a bare `href.trim().indexOf('javascr

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-79 #cwe-83 #severity:medium

安全公告2026-07-31 发布INFO

Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows...

CVE-2026-59232

Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated users holding

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-07-31 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-34495

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls F

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

漏洞预警2026-07-31 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS. This issue affects...

CVE-2026-34495

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls F

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated users holding the create or update lead permission to execute arbitrary...

CVE-2026-59232

Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated users holding

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when ...

CVE-2026-46594

A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicio

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

WP Photo Album Plus is vulnerable to stored Cross-Site Scripting in all versions up to, and including, 9.2.03.001 through a decode-after-sanitize (double-encoding) flaw in the p...

CVE-2026-14922

WP Photo Album Plus is vulnerable to stored Cross-Site Scripting in all versions up to, and including, 9.2.03.001 throug

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.5's shared link-rendering function, Ultimate_VC_Addons::uavc_link_init(),

CVE-2026-14921

The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.5's shared link-rendering function, Ultimate_

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

The NewStatPress WordPress plugin before 1.4.5 does not sanitise and escape data derived from unauthenticated visitor requests before storing it and later outputting it in one o...

CVE-2026-14845

The NewStatPress WordPress plugin before 1.4.5 does not sanitise and escape data derived from unauthenticated visitor re

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

The Lightbox with PhotoSwipe WordPress plugin before 5.9.0 does not sanitise or escape a link data attribute before rendering it into the image lightbox caption in the browser, ...

CVE-2026-14833

The Lightbox with PhotoSwipe WordPress plugin before 5.9.0 does not sanitise or escape a link data attribute before rend

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

The Frontend Admin by DynamiApps WordPress plugin before 3.29.9 decodes HTML entities in a submitted form field value after sanitizing it, which restores HTML tags that the sani...

CVE-2026-13609

The Frontend Admin by DynamiApps WordPress plugin before 3.29.9 decodes HTML entities in a submitted form field value af

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them on the ...

CVE-2026-13393

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-controlled HTML and SVG files with extension-derived content typ...

CVE-2026-56672

ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-control

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-31 发布INFO

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpoint served uploaded SVG files inline because image/svg+xm...

CVE-2026-56670

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpo

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-07-31 发布INFO

ComfyUI: Stored XSS via /userdata/{file} due to Missing Content-Type Sanitization

CVE-2026-56672

ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-control

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-07-31 发布INFO

ComfyUI: Stored XSS via SVG file upload on the /view endpoint

CVE-2026-56670

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpo

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79