#cwe-79

共收录 5879 条相关情报。

← 返回所有主题
漏洞预警2026-07-06 发布INFO

The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_id' shortcode attribute of the [fbrev] shortco...

CVE-2026-12154

The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application ownCloud Classic. In DrawIO for ownCloud prior to version ...

CVE-2025-53831

DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker ...

CVE-2025-8591

The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back

历史摘要 · 未重新核验 · NVD

安全公告2026-07-06 发布INFO

A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the...

CVE-2026-14791

A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-06 发布INFO

A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of the file app/Http/Requests/InvoicesRequest.php of the co...

CVE-2026-14791

A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of

历史摘要 · 未重新核验 · NVD

安全公告2026-07-05 发布INFO

A security vulnerability has been detected in mjperpinosa stumasy up to...

CVE-2026-14752

A security vulnerability has been detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-05 发布INFO

A security vulnerability has been detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This affects the function add_definition of the file applicatio...

CVE-2026-14752

A security vulnerability has been detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This a

历史摘要 · 未重新核验 · NVD

安全公告2026-07-05 发布INFO

A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability...

CVE-2026-14704

A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functiona

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-05 发布INFO

A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code resu...

CVE-2026-14704

A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functiona

历史摘要 · 未重新核验 · NVD

安全公告2026-07-05 发布INFO

A security vulnerability has been detected in code-projects Assessment Management 1.0. This...

CVE-2026-14656

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-05 发布INFO

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue...

CVE-2026-14655

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-04 发布MEDIUM

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the a...

CVE-2026-14656

CVE-2026-14656 是一个存在于 code-projects Assessment Management 1.0 中的跨站脚本 (XSS) 漏洞。该漏洞影响 /admin/remove-user.php 文件,攻击者可以通过操纵

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-04 发布LOW

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a man...

CVE-2026-14655

CVE-2026-14655 是 code-projects Assessment Management 1.0 中的一个跨站脚本(XSS)漏洞。该漏洞位于 admin/view-users.php 文件中,通过对参数 'User' 进行操

历史摘要 · 未重新核验 · NVD

安全公告2026-07-04 发布INFO

A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to...

CVE-2026-14634

A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e0139

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-04 发布INFO

A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to...

CVE-2026-14633

A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d91

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-04 发布INFO

A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e01394517. This vulnerability affects the function checkForPos...

CVE-2026-14634

A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e0139

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-04 发布INFO

A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d911a04. This affects an unknown part of the file /index.php...

CVE-2026-14633

A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d91

历史摘要 · 未重新核验 · NVD

安全公告2026-07-03 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...

CVE-2026-58298

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-03 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...

CVE-2026-58524

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-03 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...

CVE-2026-57977

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)

历史摘要 · 未重新核验 · GitHub Advisory