GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File...
CVE-2026-48537
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configurati
#cwe-79
共收录 5770 条相关情报。
← 返回所有主题GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the...
CVE-2026-48539
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report conf
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General...
CVE-2026-48536
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Settings SMTP configuratio
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
JupyterLab 4.5+ allows notebook settings to be shared and applied through an `overrides.json` file using the `Import` bu
JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
JupyterLab's image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through th
Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in vi...
CVE-2026-64795
Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup
Stored condition values could also execute HTML/JavaScript in administrator summaries.
CVE-2026-63281
Stored condition values could also execute HTML/JavaScript in administrator summaries.
Froiden TableTrack through 1.3.10 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary HTML and JavaScript through the ...
CVE-2026-64828
Froiden TableTrack through 1.3.10 contains a stored cross-site scripting vulnerability that allows unauthenticated attac
Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XSS) attack. When Unblu Spark is deployed with com.unblu.identif...
CVE-2026-8152
Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XSS) atta
n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scripting vulnerability in the HTML preview, which renders execution output into an ifr...
CVE-2026-65597
n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scripting vulnerability in the
n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedRes...
CVE-2026-65592
n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator
n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe
CVE-2026-65597
n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scripting vulnerability in the
n8n before 1.123.64 Stored DOM XSS via cachedResultUrl
CVE-2026-65592
n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator
The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller.
CVE-2026-63264
The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller.
The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes in all...
CVE-2026-15787
The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu
The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthenticated file-upload endpoint and accepts SVG files that ar...
CVE-2026-12968
The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthent
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected...
CVE-2026-16485
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects...
CVE-2026-16486
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the f
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSIS.php. Performing a manipulation of the argument ...
CVE-2026-16486
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the f
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /class.php. Such manipul...
CVE-2026-16485
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u