#cwe-79
共收录 5879 条相关情报。
← 返回所有主题 漏洞预警2026-07-09 发布INFO
CVE-2026-15000
The Connect Contact Form 7 and Mailchimp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mailchimp
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-09 发布INFO
CVE-2026-14343
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'note_before' and 'note_after
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-09 发布INFO
CVE-2026-13771
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'color' Short
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-09 发布INFO
CVE-2026-13334
The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all v
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-09 发布INFO
CVE-2026-13253
The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attr
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-09 发布INFO
CVE-2026-12170
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v
历史摘要 · 未重新核验 · NVD
安全公告2026-07-09 发布INFO
CVE-2026-47646
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allo
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-09 发布INFO
CVE-2026-5922
The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpa
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-09 发布INFO
CVE-2026-47646
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-08 发布INFO
CVE-2026-15128
Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbit
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-08 发布INFO
CVE-2026-15127
Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbit
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-08 发布INFO
CVE-2026-5922
The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpa
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-08 发布INFO
CVE-2026-55877
Symfony UX is a JavaScript ecosystem for Symfony. From 2.17.0 before 2.36.1 and from 3.0.0 before 3.2.0, the ux_icon() T
历史摘要 · 未重新核验 · NVD
安全公告2026-07-08 发布INFO
CVE-2026-55877
Symfony UX is a JavaScript ecosystem for Symfony. From 2.17.0 before 2.36.1 and from 3.0.0 before 3.2.0, the ux_icon() T
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-07-08 发布INFO
CVE-2026-6896
GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-08 发布INFO
CVE-2026-13320
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-08 发布INFO
CVE-2026-6896
GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-08 发布INFO
CVE-2026-58191
Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-08 发布INFO
CVE-2026-55596
Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until 53.1.4, the media embed renderer trusts serialized
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-08 发布INFO
CVE-2026-54527
JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() metho
历史摘要 · 未重新核验 · NVD