共收录 5328 条相关情报。
← 返回所有主题CVE-2026-117494
Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:i
CVE-2026-117493
Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards//widgets/ API accepts HTML and JavaScript content
CVE-2026-111820
The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Sit
CVE-2026-116640
A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8
CVE-2026-116639
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd2
CVE-2026-116836
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scr
CVE-2026-116640
A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8
CVE-2026-116639
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd2
CVE-2026-116836
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scr
CVE-2026-116824
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allo
CVE-2026-116823
YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in
CVE-2026-116804
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expression
CVE-2026-116555
A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-f
CVE-2026-116802
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attribute
CVE-2026-116803
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed
CVE-2026-116556
A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componen
CVE-2026-116554
A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla
CVE-2026-116514
A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file
CVE-2026-116824
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allo
CVE-2026-116804
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expression