共收录 5879 条相关情报。
← 返回所有主题CVE-2026-15096
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map Module 'b_width_map' Field
CVE-2026-12141
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored C
CVE-2025-13968
The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcod
CVE-2026-58591
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox al
CVE-2026-58587
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canv
CVE-2026-58588
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canv
CVE-2026-15085
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI SEO/GEO
CVE-2026-15084
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Patterns
CVE-2026-15082
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Siteimprove
CVE-2026-55808
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core
CVE-2026-10769
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Co
CVE-2026-13234
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific
CVE-2026-13231
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Advanced Co
CVE-2026-10770
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam b
CVE-2026-11908
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allo
CVE-2026-58591
CVE-2026-58591 是 Drupal Colorbox 模块中的一个跨站脚本（XSS）漏洞。Colorbox 是一个用于 Drupal 的轻量级 jQuery 插件，用于在弹出窗口中显示图像、HTML 内容等。该漏洞源于对用户输入
CVE-2026-58588
CVE-2026-58588 是 Drupal 中 Canvas 模块的一个跨站脚本（XSS）漏洞。由于在生成网页时未正确中和用户输入，攻击者可以向受影响的页面注入任意 JavaScript 代码。该漏洞影响多个版本范围：0.0.0 至 1
CVE-2026-58587
CVE-2026-58587 是 Drupal Canvas 模块中的一个跨站脚本（XSS）漏洞。Drupal Canvas 是 Drupal 的一个扩展模块，用于提供画布功能。该漏洞源于程序在生成网页时未正确过滤用户输入，导致攻击者可以注
CVE-2026-55808
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core
CVE-2026-15085
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI SEO/GEO