#cwe-79

共收录 5879 条相关情报。

← 返回所有主题
漏洞预警2026-07-09 发布INFO

The Connect Contact Form 7 and Mailchimp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mailchimp Merge Field Values in all versions up to, and including,...

CVE-2026-15000

The Connect Contact Form 7 and Mailchimp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mailchimp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'note_before' and 'note_after' Shortcode Attributes in all versions up to, and includi...

CVE-2026-14343

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'note_before' and 'note_after

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'color' Shortcode Attribute in all versions up to, and including, 5.11...

CVE-2026-13771

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'color' Short

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all versions up to, and including, 2.3.4 due to insufficient i...

CVE-2026-13334

The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versi...

CVE-2026-13253

The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignme...

CVE-2026-12170

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics...

CVE-2026-47646

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

The IP phone might use malicious input stored in configuration parameters and render it as...

CVE-2026-5922

The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-09 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a ne...

CVE-2026-47646

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chr...

CVE-2026-15128

Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chr...

CVE-2026-15127

Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage.

CVE-2026-5922

The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Symfony UX is a JavaScript ecosystem for Symfony. From 2.17.0 before 2.36.1 and from 3.0.0 before 3.2.0, the ux_icon() Twig function is marked is_safe=['html'] and Icon::toHtml(...

CVE-2026-55877

Symfony UX is a JavaScript ecosystem for Symfony. From 2.17.0 before 2.36.1 and from 3.0.0 before 3.2.0, the ux_icon() T

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Symfony UX: XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responses

CVE-2026-55877

Symfony UX is a JavaScript ecosystem for Symfony. From 2.17.0 before 2.36.1 and from 3.0.0 before 3.2.0, the ux_icon() T

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19...

CVE-2026-6896

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-08 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 18.11.7,...

CVE-2026-13320

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-08 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have...

CVE-2026-6896

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 10.7.0, Appium's base-driver unconditionally mounts t...

CVE-2026-58191

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until 53.1.4, the media embed renderer trusts serialized provider or sourceUrl metadata in useMediaState and skips...

CVE-2026-55596

Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until 53.1.4, the media embed renderer trusts serialized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when renderi...

CVE-2026-54527

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() metho

历史摘要 · 未重新核验 · NVD