#cwe-79

共收录 5879 条相关情报。

漏洞预警2026-06-08 发布INFO

WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the prese...

CVE-2021-47982

WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-06-08 发布INFO

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0....

CVE-2026-11468

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:low

漏洞预警2026-06-08 发布INFO

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room_types. P...

CVE-2026-11468

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-06-06 发布INFO

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of...

CVE-2026-11436

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:low

漏洞预警2026-06-06 发布MEDIUM

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend/components/Sessions/SignForm/index.tsx of the component ...

CVE-2026-11436

CVE-2026-11436 是影响 Mage AI 开源平台（版本 ≤0.9.79）的一个跨站脚本（XSS）漏洞。该漏洞存在于前端登录流程组件（Sign-in Flow）中，具体位于文件 mage_ai/frontend/componen

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-06-06 发布INFO

A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of...

CVE-2026-11434

A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:low

漏洞预警2026-06-06 发布LOW

A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes...

CVE-2026-11434

FluentCMS 0.0.5 被发现存在一个跨站脚本（XSS）漏洞，位于文件 /admin/blocks 的未知函数中（属于 Blocks Plugin 组件）。攻击者可通过远程方式利用该漏洞，但需要管理员权限且用户交互（PR:H, UI

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-06-06 发布INFO

The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting...

CVE-2026-7795

The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [chat] shortcode

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-06-06 发布INFO

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to...

CVE-2026-8991

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Script

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-06-06 发布INFO

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross...

CVE-2026-9280

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-06-06 发布INFO

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin...

CVE-2026-9594

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnera

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-06-06 发布INFO

The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more...

CVE-2026-7796

The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more plugin for WordPress i

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

漏洞预警2026-06-06 发布INFO

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'location_mess...

CVE-2026-9594

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnera

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-06-06 发布MEDIUM

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Parameters in iframe Mode in all versions up to, and incl...

CVE-2026-9280

CVE-2026-9280 是 WordPress 插件 Ad Inserter – Ad Manager & AdSense Ads（版本至 2.8.15 包含）中的一个反射型跨站脚本（XSS）漏洞。该漏洞源于插件在 iframe 模式下

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-06-06 发布MEDIUM

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' ...

CVE-2026-8991

CVE-2026-8991 影响 WordPress 的 Drag and Drop Multiple File Upload for Contact Form 7 插件（版本 ≤ 1.3.9.7）。该漏洞属于存储型跨站脚本（Stored

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-06-06 发布MEDIUM

The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block...

CVE-2026-7796

EmbedPress是一款WordPress插件，提供PDF嵌入、视频、3D翻页书等功能。该插件在4.5.3及之前的所有版本中，其区块的'url'属性存在存储型跨站脚本（Stored XSS）漏洞。由于对用户输入的数据过滤不严且输出时未正确

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-06-06 发布MEDIUM

The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [chat] shortcode 'num' parameter in all versions up to, and including, 4....

CVE-2026-7795

CVE-2026-7795 是 WordPress 插件 Click to Chat – WA Widget（版本 ≤ 4.38）中的一个存储型跨站脚本漏洞。该插件通过 [chat] 短代码提供 WhatsApp 聊天按钮功能，其 'num

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-06-06 发布INFO

The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to...

CVE-2026-8438

The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:high

安全公告2026-06-06 发布INFO

The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More...

CVE-2026-8901

The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vuln

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:high

安全公告2026-06-06 发布INFO

The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template...

CVE-2026-9281

The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits plugin for WordPress

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium