#cwe-79
共收录 5879 条相关情报。
← 返回所有主题 漏洞预警2026-07-03 发布INFO
CVE-2026-58524
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-58298
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-57977
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-28737
Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-4322
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Raera - Ankara Web
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-9756
The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Headline Block 'linkMetaFieldTy
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-4804
The Zakra theme for WordPress is vulnerable to Stored Cross-Site Scripting via post meta values in all versions up to, a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-9148
The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Websi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-8351
The RTMKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Heading widget's 'Backgrou
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-9626
The JSON API User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter of the p
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-8892
The CM Business Directory – Optimise and showcase local business plugin for WordPress is vulnerable to Stored Cross-Site
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-8489
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-13040
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-13374
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-02 发布INFO
CVE-2026-55791
Craft CMS is a content management system (CMS). Versions 4.0.0-RC1 and above, prior to 4.18.0 and 5.0.0-RC1, and above,
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-01 发布INFO
CVE-2026-55790
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-01 发布INFO
CVE-2026-55793
Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22, an author-level control panel user
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-01 发布INFO
CVE-2026-54263
Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, reflec
历史摘要 · 未重新核验 · NVD
安全公告2026-07-01 发布INFO
CVE-2026-14358
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-01 发布INFO
CVE-2026-58263
Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. In versions prior
历史摘要 · 未重新核验 · NVD