共收录 5879 条相关情报。
← 返回所有主题CVE-2026-50876
A cross-site scripting (XSS) vulnerability in Deck9 Input v2.0.1 allows attackers to execute arbitrary web scripts or HT
CVE-2026-37216
Ruoyi 4.8.2 is vulnerable to Cross Site Scripting (XSS) at the interface /system/notice/add.
CVE-2026-36521
PublicCMS V5.202506.d has a Cross Site Scripting (XSS) vulnerability in the site configuration management module.
CVE-2026-49294
Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. Versions 3.6.3 and
CVE-2025-15659
Contributor Cross Site Scripting (XSS) in Elizaibots <= 1.0.2 versions.
CVE-2025-15658
Administrator Cross Site Scripting (XSS) in WP Emmet <= 0.3.4 versions.
CVE-2016-20084
WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthen
CVE-2016-20070
WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabili
CVE-2016-20066
WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malici
CVE-2026-12202
A vulnerability has been found in Intelliants Subrion CMS up to 4.0.3. Affected by this issue is some unknown functional
CVE-2026-11443
Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote at
CVE-2026-11443
该漏洞是Allegra软件中downloadAttachment方法存在的跨站脚本（XSS）认证绕过漏洞。远程攻击者可以通过构造恶意页面或文件，诱使用户访问，从而在用户浏览器中执行任意脚本。漏洞的根本原因是程序对用户提供的输入缺乏充分验证和
CVE-2026-53608
ApostropheCMS is an open-source Node.js content management system. Versions up to and including 1.4.2 of the `@apostroph
CVE-2026-54395
MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The urlparams value is inse
CVE-2026-54393
A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint pre
CVE-2026-12129
A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Affected by this issue is some unknown
CVE-2026-12130
A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. This affects an unknown part of t
CVE-2026-54395
MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The urlparams value is inse
CVE-2026-54393
A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint pre
CVE-2026-53606
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi