SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-116169
SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows users with edit permiss
#cwe-79
共收录 5328 条相关情报。
← 返回所有主题SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the...
CVE-2026-116167
SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page tha
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the...
CVE-2026-116148
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does
YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject script into comment bodies using the wakka raw-HTM...
CVE-2026-116206
YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users to upload unsanitized SVG files through the bazar ImageFi...
CVE-2026-116202
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users
SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows users with edit permission to inject script by placing javascript: URLs in math ...
CVE-2026-116169
SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows users with edit permiss
A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Su...
CVE-2026-116047
A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an...
CVE-2026-116004
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx...
CVE-2026-116004
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file
A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function...
CVE-2026-115982
A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file
A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability...
CVE-2026-115981
A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown function
A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file app/tools/racks/show-rack-popup.php of the component Rac...
CVE-2026-115982
A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114194
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser
Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta...
CVE-2026-115993
Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker t
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114693
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs Al
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114695
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114178
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold Grid W3 Total
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114697
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuarkA QA Analytic
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-112844
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114179
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better