Cyber Security Daily Radar

#cwe-79

共收录 5879 条相关情报。

← 返回所有主题
漏洞预警2026-06-27 发布INFO

The MaxButtons – Create buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'view' parameter in all versions up to, and including, 9.8.5 due to ...

CVE-2026-13245

The MaxButtons – Create buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'view' para

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
安全公告2026-06-27 发布INFO

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-13335

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpm_point

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-79#severity:medium
安全公告2026-06-27 发布INFO

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross...

CVE-2026-11356

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-79#severity:medium
漏洞预警2026-06-27 发布MEDIUM

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpm_point' Post Meta in all versions up to, and including, 1.2.6 d...

CVE-2026-13335

该漏洞存在于CodePeople开发的WordPress插件“Post Map for Google Maps”中，影响所有版本直至1.2.6（含）。漏洞类型为存储型跨站脚本（Stored XSS），位于插件处理的地图标记点（cpm_poi

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-27 发布MEDIUM

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings in all versions...

CVE-2026-11356

Ivory Search – WordPress 搜索插件（版本 5.5.15 及以下）存在存储型跨站脚本（XSS）漏洞，影响通过 'menu_title' 和 'menu_magnifier_color' 设置提交的数据。该漏洞源于对这些

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the HTML sanitizer grants <macro> elements unrestricted data-* attributes via :dat...

CVE-2026-52781

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the HTML sanitizer grants

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenProject's rich text (markdown) rendering pipeline uses Sanitize::Config::RELAXED[:css] fo...

CVE-2026-44696

OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenProject's rich text (markdown) r

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions.

CVE-2026-57656

Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.

CVE-2026-57651

Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions.

CVE-2026-57650

Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions.

CVE-2026-57638

Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Contributor Cross Site Scripting (XSS) in StatCounter <= 2.1.1 versions.

CVE-2026-57629

Contributor Cross Site Scripting (XSS) in StatCounter <= 2.1.1 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Contributor Cross Site Scripting (XSS) in Neve PRO <= 3.1.2 versions.

CVE-2026-57618

Contributor Cross Site Scripting (XSS) in Neve PRO <= 3.1.2 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Contributor Cross Site Scripting (XSS) in SeedProd Pro < 6.19.5 versions.

CVE-2026-57617

Contributor Cross Site Scripting (XSS) in SeedProd Pro < 6.19.5 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions.

CVE-2026-57431

Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions.

CVE-2026-57325

Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Unauthenticated Cross Site Scripting (XSS) in weMail <= 2.1.2 versions.

CVE-2026-57322

Unauthenticated Cross Site Scripting (XSS) in weMail <= 2.1.2 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions.

CVE-2026-57319

Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions.

CVE-2026-57317

Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-06-26 发布INFO

Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions.

CVE-2026-57314

Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79