The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...
CVE-2026-7640
The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the `
#cwe-79
共收录 5879 条相关情报。
← 返回所有主题SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious...
CVE-2026-44752
SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious JavaScript through crafted
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts...
CVE-2026-44759
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The
Due to a Cross-Site Scripting (XSS) vulnerability, applications based on Business Server Pages...
CVE-2026-44760
Due to a Cross-Site Scripting (XSS) vulnerability, applications based on Business Server Pages framework in SAP NetWeave
The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the `customer-area-protected-content` shortcode in all version...
CVE-2026-7640
CVE-2026-7640 是 WordPress 的 WP Customer Area 插件中的一个存储型跨站脚本（XSS）漏洞，影响所有版本至 8.3.5（包含）。该漏洞存在于 `customer-area-protected-cont
The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets in all versions up to, and ...
CVE-2026-11390
该漏洞存在于WordPress的News Kit Addons For Elementor插件中，影响所有版本直至1.4.6（含）。漏洞存在于Site Logo Title和Single Author Box组件中，由于对用户输入的清理和输
Due to a Cross-Site Scripting (XSS) vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into...
CVE-2026-44760
CVE-2026-44760 是一个影响 SAP NetWeaver Application Server ABAP 中基于 Business Server Pages (BSP) 框架的应用程序的跨站脚本 (XSS) 漏洞。该漏洞源于框架
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and execute...
CVE-2026-44759
该漏洞影响 SAP NetWeaver Enterprise Portal，是一个反射型跨站脚本（XSS）漏洞。未经身份验证的攻击者可以通过构造恶意 URL 参数，将恶意脚本注入到服务器响应中。当用户访问该特制 URL 时，脚本会在用户浏览
SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious JavaScript through crafted URLs. When a victim accesses such a URL, the script execu...
CVE-2026-44752
CVE-2026-44752 是 SAP NetWeaver Application Server Java 中的一个跨站脚本 (XSS) 漏洞。未经身份验证的攻击者可以通过构造恶意 URL 注入任意的 JavaScript 代码。当受害者
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The...
CVE-2026-15596
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unkno
MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. In versions prior to 1.85.10, the createLocatorGeneratorUI ...
CVE-2026-58500
MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. In
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses...
CVE-2026-58487
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe
ChurchCRM is an open-source church management system. Prior to version 7.4.0, Cross-Site Scripting (XSS) vulnerabilities were identified due to insufficient output encoding of u...
CVE-2026-58411
ChurchCRM is an open-source church management system. Prior to version 7.4.0, Cross-Site Scripting (XSS) vulnerabilities
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /subject.php. Such manipulation o...
CVE-2026-15596
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unkno
HedgeDoc: Stored HTML injection via email local-part
CVE-2026-58487
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The...
CVE-2026-15595
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unkno
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-12536
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Module Title’ para
Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-49971
Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymou
MCP Appium: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI)
CVE-2026-58500
MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. In
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /forsubject.php. This manipulatio...
CVE-2026-15595
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unkno